f9c0303d07800ed7cba1394cd326bbe8f49c7c5e0e062be59a9749f6c51c6e69[.]bin

General

Target

f9c0303d07800ed7cba1394cd326bbe8f49c7c5e0e062be59a9749f6c51c6e69.bin
Size

282KB
MD5

93c589e9eaf3272bc0349d605b85c566
SHA1

ee788901cd804965f1cd00a0afc713c8623430c4
SHA256

f9c0303d07800ed7cba1394cd326bbe8f49c7c5e0e062be59a9749f6c51c6e69
SHA512

35e77541760b584121783b9d96009431d44cf7c4f3c04574d80d6a0eb1fbeee222add472ec0a163cc7d81fc6187413b04c0fe88a1c7f46472b166fceba6bf7d7
SSDEEP

6144:AUG13xjrDdy6UhBxflrLgUn3ALE3qVigM:+135Vy6UhNALE6VigM

Score

N/A

Malware Config

Signatures

Files

f9c0303d07800ed7cba1394cd326bbe8f49c7c5e0e062be59a9749f6c51c6e69.bin
.exe windows x86

44f321df6c4802c9e36cb2811e153746

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryW
WriteFile
LoadLibraryW
CreateFileW
GetProcAddress
CloseHandle
GetTickCount
Sleep
GetModuleFileNameW
ExpandEnvironmentStringsW
HeapAlloc
GetLastError
DeleteFileW
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
ExitProcess
DecodePointer
GetStdHandle
HeapCreate
EncodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
IsProcessorFeaturePresent
HeapFree
MultiByteToWideChar
ReadFile
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetFilePointer
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteConsoleW
FlushFileBuffers
HeapSize
HeapReAlloc
SetEndOfFile
GetProcessHeap
LCMapStringW
GetStringTypeW

shlwapi

PathRemoveExtensionW
PathFindFileNameW

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

44f321df6c4802c9e36cb2811e153746

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shlwapi

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 11KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 11KB

.reloc
Size: 5KB - Virtual size: 5KB