76b64dc0a80f32134aa292b77dbba2ba[.]exe[.]vir

General

Target

76b64dc0a80f32134aa292b77dbba2ba.exe.vir
Size

142KB
MD5

76b64dc0a80f32134aa292b77dbba2ba
SHA1

d2c19d8ee3f27ed5ecc849cc048a63d9a0214795
SHA256

51b2148f5ac2344b8c892dec78e24bff1e4df2f351d5cda6eae60c56b513785a
SHA512

ce83af50b2d668389907718bab3bee6f3f806bf05f942cf495ab35976c3e9aa5588fb6271d112e2edb90921417affc6009a1fa9114bf4ff3627bd342260e95ca
SSDEEP

3072:o+lBxbOZFTMv4QXGahq+KvG3RVUUr9LcROKpf:TU+24j9a0Kpf

Score

N/A

Malware Config

Signatures

Files

76b64dc0a80f32134aa292b77dbba2ba.exe.vir
.exe windows x64

43a091cb94e8d7a0cbb5bbfdeadc5ac4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CreateFileA
WriteFile
CloseHandle
CreateMutexA
GetLastError
LoadLibraryA
GetProcAddress
GetModuleFileNameA
Sleep
FlushFileBuffers
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetFileAttributesA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RaiseException
RtlPcToFileHeader
GetModuleHandleA
ExitProcess
GetStdHandle
RtlUnwindEx
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
FlsGetValue
FlsSetValue
TlsFree
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LeaveCriticalSection
EnterCriticalSection
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSection
HeapReAlloc
SetStdHandle

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

43a091cb94e8d7a0cbb5bbfdeadc5ac4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 63KB - Virtual size: 63KB

.rdata Size: 18KB - Virtual size: 18KB

.data Size: 7KB - Virtual size: 15KB

.pdata Size: 4KB - Virtual size: 4KB

.rsrc Size: 48KB - Virtual size: 47KB

.text
Size: 63KB - Virtual size: 63KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 7KB - Virtual size: 15KB

.pdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 48KB - Virtual size: 47KB