fd92853082660e430193b40c4c0c059e3e2335d964c07574870dbc944e59ffab

Sharing

Copy URL

Twitter E-mail

General

Target

fd92853082660e430193b40c4c0c059e3e2335d964c07574870dbc944e59ffab
Size

168KB
MD5

8ef9038e934dd7264c3e909823b78d4b
SHA1

c4bd3421059714a0f1bdb38a306cf2d4a1342ebf
SHA256

fd92853082660e430193b40c4c0c059e3e2335d964c07574870dbc944e59ffab
SHA512

0664e00a3682b4519104b5e3c96506ff34786ebfcd4524eb734b92e44282acb49e469aa0730346477c0b964562133f2cff3b2ce7337d3089ff53e84dac5a3cf7
SSDEEP

3072:bvo2OeYYENL1sB4U9C6jyJ4TN7CXTWGF3nYtFzj2Hi+h4yG7gtPRe:7o2OeYZ7ICXTW43nyn2Hi+h4ykgtPRe

Score

N/A

Malware Config

Signatures

Files

fd92853082660e430193b40c4c0c059e3e2335d964c07574870dbc944e59ffab
.exe windows x86

1c20355bf037e1894282623dbaedde43

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
SetEvent
GetTickCount
Sleep
GetLastError
CreateEventW
CreateThread
GetSystemTimeAsFileTime
GetCurrentProcessId
CloseHandle
TerminateProcess
WaitForSingleObject
GetCurrentThreadId
InterlockedExchange
InterlockedCompareExchange
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

advapi32

RegisterServiceCtrlHandlerW
SetServiceStatus
StartServiceCtrlDispatcherW

msvcr90

??3@YAXPAX@Z
??2@YAPAXI@Z
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
__winitenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
_invoke_watson
_controlfp_s
__CxxFrameHandler3

msvcp90

??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

Sections

.text
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.upx0
Size: - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.upx1
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c20355bf037e1894282623dbaedde43

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

msvcr90

msvcp90

Sections

.text Size: - Virtual size: 2KB

.rdata Size: - Virtual size: 1KB

.data Size: - Virtual size: 7KB

.upx0 Size: - Virtual size: 29KB

.upx1 Size: 76KB - Virtual size: 75KB

.rsrc Size: 91KB - Virtual size: 90KB

.text
Size: - Virtual size: 2KB

.rdata
Size: - Virtual size: 1KB

.data
Size: - Virtual size: 7KB

.upx0
Size: - Virtual size: 29KB

.upx1
Size: 76KB - Virtual size: 75KB

.rsrc
Size: 91KB - Virtual size: 90KB