4a9f6c4b7a5c0716912b22366f2b84ae[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

4a9f6c4b7a5c0716912b22366f2b84ae.exe
Size

317KB
MD5

4a9f6c4b7a5c0716912b22366f2b84ae
SHA1

c89d3f01152d9c593583545403492d958210831e
SHA256

4b8067eeb1ff123514e59e09404686f72e9587b723814dd19efdecef767e848a
SHA512

3d318bec41b833930577857e3d7ae3725c3560f4bb9692bb8a448ab1324f7f0ccc28d1ccbe7b9af7149caffc14efcac63d3a43893b6210e8f878e903a16d6085
SSDEEP

6144:BFz7r/sY3DYJniWxWOYSwkrVEi597Bo4:BFz7rUYKis9YSwkrVEiZo4

Score

N/A

Malware Config

Signatures

Files

4a9f6c4b7a5c0716912b22366f2b84ae.exe
.exe windows x86

48c0d50a5c3dfb9bf56e1faf4f5e8221

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
HeapSize
LoadLibraryA
MultiByteToWideChar
FlushFileBuffers
DecodePointer
GetConsoleMode
GetConsoleCP
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
RaiseException
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetTempPathW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetFileType
GetFileAttributesExW
CloseHandle
CreateFileW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
LCMapStringW
GetProcessHeap
SetFilePointerEx
WriteConsoleW

advapi32

GetCurrentHwProfileA

shell32

ShellExecuteA

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48c0d50a5c3dfb9bf56e1faf4f5e8221

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shell32

Sections

.text Size: 88KB - Virtual size: 88KB

.rdata Size: 27KB - Virtual size: 27KB

.data Size: 2KB - Virtual size: 5KB

.rsrc Size: 192KB - Virtual size: 191KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 88KB - Virtual size: 88KB

.rdata
Size: 27KB - Virtual size: 27KB

.data
Size: 2KB - Virtual size: 5KB

.rsrc
Size: 192KB - Virtual size: 191KB

.reloc
Size: 6KB - Virtual size: 5KB