4ad6c08d9413ccafcd29fd13e9d944e8bf5e4ac6ed4aa57df465535182984be9

Sharing

Copy URL

Twitter E-mail

General

Target

4ad6c08d9413ccafcd29fd13e9d944e8bf5e4ac6ed4aa57df465535182984be9
Size

505KB
MD5

f254b753aa128c249c1b6e8845f7a0e6
SHA1

7575e9e82d10440ad2241e0fe4909945e663103d
SHA256

4ad6c08d9413ccafcd29fd13e9d944e8bf5e4ac6ed4aa57df465535182984be9
SHA512

ce9bbb58171ea3cbe2ba5aaf6f17f1a336e41b241758f5380c6ed81dd4dffbb2ce593e00e2ef4471eb36cfa591beccb9320cbb81f438f45f8432b4e859a87721
SSDEEP

6144:jO8Wqeb0ogzJ4iXhr2sjuX90lQrjwcjy4CS1MajAC7hZfmkQppTyzNTyzi:jO8Wqeb0og94iXhr2uuNS4Dmyzhyzi

Score

N/A

Malware Config

Signatures

Files

4ad6c08d9413ccafcd29fd13e9d944e8bf5e4ac6ed4aa57df465535182984be9
.exe windows x64

0c8fccaed0754498b61d57efebef1524

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetFileAttributesA
LoadLibraryA
GetProcAddress
CreateDirectoryA
Sleep
MultiByteToWideChar
SetLastError
GetLastError
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
InitializeCriticalSectionEx
RaiseException
DeleteCriticalSection
CreateFileW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
CloseHandle
SetEvent
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
GetCurrentProcess
TerminateProcess
RtlUnwindEx
RtlPcToFileHeader
EncodePointer
FreeLibrary
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
HeapValidate
GetSystemInfo
GetStdHandle
WriteFile
GetFileType
WriteConsoleW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
MoveFileExW
HeapQueryInformation

user32

EndDialog
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DestroyWindow
DialogBoxParamA
UpdateWindow
ShowWindow
RegisterClassExA
LoadCursorA
LoadIconA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
CreateWindowExA

Sections

.text
Size: 289KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxfg
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gehcont
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 85KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0c8fccaed0754498b61d57efebef1524

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 289KB - Virtual size: 289KB

.rdata Size: 88KB - Virtual size: 87KB

.data Size: 3KB - Virtual size: 18KB

.pdata Size: 16KB - Virtual size: 15KB

.gxfg Size: 19KB - Virtual size: 19KB

.gehcont Size: 512B - Virtual size: 20B

.rsrc Size: 85KB - Virtual size: 88KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 289KB - Virtual size: 289KB

.rdata
Size: 88KB - Virtual size: 87KB

.data
Size: 3KB - Virtual size: 18KB

.pdata
Size: 16KB - Virtual size: 15KB

.gxfg
Size: 19KB - Virtual size: 19KB

.gehcont
Size: 512B - Virtual size: 20B

.rsrc
Size: 85KB - Virtual size: 88KB

.reloc
Size: 2KB - Virtual size: 1KB