68fafc50c7f833ee1235595170f00e386d148fa03eb773b99659a61ca6952681

Sharing

Copy URL

Twitter E-mail

General

Target

68fafc50c7f833ee1235595170f00e386d148fa03eb773b99659a61ca6952681
Size

345KB
MD5

78e79fb83eb94d6d6c435e5060bfc54a
SHA1

8b667d1fa5681cc9274ba1fccabf1c305fcaba03
SHA256

68fafc50c7f833ee1235595170f00e386d148fa03eb773b99659a61ca6952681
SHA512

22ab18b9c286b658e6463696974cb730e5a48cddacc171c567ff8ca933e6dd5f902910a6d4efb0b4a4cb26753fec88d4e220b0ced0c4873f2be13cb3b9d91292
SSDEEP

6144:z4ApvRQd+eTUid3cRYd4hXV9WjvMGc7BxZuO:znvRQROeDMI

Score

N/A

Malware Config

Signatures

Files

68fafc50c7f833ee1235595170f00e386d148fa03eb773b99659a61ca6952681
.exe windows x64

5f8db730665aa4393259e6ff1cb8567a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetProcAddress
VirtualAlloc
FindClose
Process32FirstW
Process32NextW
lstrlenW
CloseHandle
LocalAlloc
CreateFileW
GetProcessHeap
LoadLibraryW
GetModuleFileNameW
WideCharToMultiByte
GetCurrentProcess
CreateToolhelp32Snapshot
FindFirstFileW
MultiByteToWideChar
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
GetSystemTimeAsFileTime
GetModuleHandleW
ExitProcess
GetCommandLineA
GetCPInfo
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapAlloc
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
HeapSetInformation
GetVersion
HeapCreate
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
GetACP
GetOEMCP
IsValidCodePage
HeapSize
InitializeCriticalSectionAndSpinCount
ReadFile
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointer
FreeLibrary
GetLocaleInfoW
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeW
FlushFileBuffers
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
CreateFileA
SetStdHandle
WriteConsoleW
SetEndOfFile
LoadLibraryA

user32

GetDC
GetForegroundWindow

gdi32

SetPixel

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f8db730665aa4393259e6ff1cb8567a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 152KB - Virtual size: 151KB

.rdata Size: 37KB - Virtual size: 36KB

.data Size: 8KB - Virtual size: 17KB

.pdata Size: 9KB - Virtual size: 9KB

.rsrc Size: 135KB - Virtual size: 135KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 152KB - Virtual size: 151KB

.rdata
Size: 37KB - Virtual size: 36KB

.data
Size: 8KB - Virtual size: 17KB

.pdata
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 135KB - Virtual size: 135KB

.reloc
Size: 2KB - Virtual size: 2KB