5bdd53f56d39ef484f70207c8b60d597f4a42c4150acc01c995bac4b6f8a5e6f

Sharing

Copy URL Twitter E-mail

General

Target

5bdd53f56d39ef484f70207c8b60d597f4a42c4150acc01c995bac4b6f8a5e6f
Size

159KB
MD5

5eeffd314d751bec3ffb5793c22779b4
SHA1

4072eb4be6b8dca8173971264a2f9afbf3f90b09
SHA256

5bdd53f56d39ef484f70207c8b60d597f4a42c4150acc01c995bac4b6f8a5e6f
SHA512

100055b77015a6d38cd498ea160bad8b850bc6f0cc1ab88c3b27913ccbc1c44860cd45d48d46b0ba2425210050d56720bbd11865268b3feff71d233d5cd9e154
SSDEEP

3072:KdayCwJmPZe+sL5gUu1x15m1fPO6XCvkvq/y+W6sYzgo9Qb1UYJWKaHDfR7xOD:KdFCCmxrO61T54mWCvkJd6rfQb1rcK

Score

N/A

Malware Config

Signatures

Files

5bdd53f56d39ef484f70207c8b60d597f4a42c4150acc01c995bac4b6f8a5e6f
.exe windows x86

5f04301bdf5b0dbba1ee19f1dd821146

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessWorkingSetSize
GetModuleHandleA
GetLocaleInfoW
GetThreadContext
FindClose
SetFilePointer
FreeEnvironmentStringsA
GetCurrentThread
InterlockedIncrement
GetSystemInfo
LocalFree
WriteConsoleW
SetHandleCount
VirtualQueryEx
LoadLibraryA
GetNumberFormatA
FormatMessageA
FindFirstFileA
GlobalUnlock
HeapSize
IsValidCodePage
GetModuleHandleW
UnhandledExceptionFilter
CreateFileMappingA
TerminateThread
Module32Next
SearchPathA
GetVersion
FlushFileBuffers
CreateFileA
GetLocaleInfoA
SetThreadAffinityMask
GetExitCodeThread
HeapReAlloc
GetProcAddress
CreateEventA
GetEnvironmentVariableA
GetCurrentProcessId
GetConsoleOutputCP
ReadProcessMemory
GetCommandLineA
VirtualAlloc
GetTickCount
SetProcessWorkingSetSize
GetDriveTypeA
EnterCriticalSection
GetFileType
GetCurrentProcess
FileTimeToSystemTime
IsDebuggerPresent
GetCurrentDirectoryA
GetEnvironmentStrings
FreeLibrary
PulseEvent
WideCharToMultiByte
InterlockedDecrement
GetStartupInfoA
GetComputerNameW
VirtualFree
GetStringTypeA
OpenEventA
UnmapViewOfFile
ResumeThread
MulDiv
lstrcpynA
GetSystemDirectoryA
ExitProcess
WaitForMultipleObjects
SetPriorityClass
GetACP
GlobalLock
SetUnhandledExceptionFilter
GetProcessAffinityMask
LCMapStringA
GetCurrentThreadId
CloseHandle
DeviceIoControl
GetCPInfo
QueryPerformanceCounter
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteFile
WaitForSingleObject
IsBadReadPtr
RtlUnwind
lstrcmpiA
GetStringTypeW
GetModuleFileNameA
FileTimeToLocalFileTime

msvcrt

_XcptFilter
__p__commode
__p__fmode
__setusermatherr
memcpy
exit
__set_app_type
_exit
_adjust_fdiv
_except_handler3
__getmainargs
_acmdln
_initterm
_controlfp

Sections

.text
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f04301bdf5b0dbba1ee19f1dd821146

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 139KB - Virtual size: 138KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 80KB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 139KB - Virtual size: 138KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 80KB

.rsrc
Size: 7KB - Virtual size: 7KB