30593287adbbf388a40b7b867f76317aa3874440f6c09a3add9fe55ccf5bffef

Sharing

Copy URL Twitter E-mail

General

Target

30593287adbbf388a40b7b867f76317aa3874440f6c09a3add9fe55ccf5bffef
Size

113KB
MD5

2576b65777554290d3c5d511f4e54475
SHA1

38cebb9515ab0b8880606dc76543934aedf2178d
SHA256

30593287adbbf388a40b7b867f76317aa3874440f6c09a3add9fe55ccf5bffef
SHA512

5b24898d2653270f01607bbc8b19355e0337d78d146d3771c108df4efebc688fb07123eb6c082b9e05c03fa6b73e6b2973ef25308331037c34a10e9b343feab4
SSDEEP

1536:Y/Ti+jBiRKR0B8LiRWbqciWtbbPE8UTcqOFsvf+7mMHGa:nMiCLisisbbPaTcRF17mMP

Score

N/A

Malware Config

Signatures

Files

30593287adbbf388a40b7b867f76317aa3874440f6c09a3add9fe55ccf5bffef
.exe windows x86

2f7349e12554dfb3b213ada41a049ae2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetCurrentThread
GetACP
GetOEMCP
TlsAlloc
HeapFree
TlsSetValue
GetEnvironmentStringsW
SetEvent
GetEnvironmentStrings
TerminateProcess
LCMapStringW
FreeEnvironmentStringsW
ReadFile
ExitProcess
HeapAlloc
CreateDirectoryW
TryEnterCriticalSection
HeapReAlloc
lstrlenW
Sleep
DeleteCriticalSection
InterlockedDecrement
GetModuleHandleW
SetLastError
TlsGetValue
GetModuleHandleA
FreeLibrary
GetCurrentProcessId
HeapDestroy
CreateThread
LocalFree
InterlockedIncrement
InterlockedCompareExchange
GetModuleFileNameW
FileTimeToSystemTime
FormatMessageW
FlushFileBuffers
FindResourceW
FindClose
SetFilePointer
ResetEvent
MultiByteToWideChar
WaitForSingleObject
FreeEnvironmentStringsA
GetProcessHeap
EnterCriticalSection
InterlockedExchange
GetStringTypeW
CreateEventW
GetStdHandle
CloseHandle
GetModuleFileNameA
RaiseException
GetCommandLineA
CompareStringW
CompareStringA
GetVersionExW
GetVersionExA
GetTimeZoneInformation
IsValidCodePage
GetStartupInfoA
GetProcAddress
WriteFile
UnhandledExceptionFilter
WideCharToMultiByte
GetLastError
SetHandleCount
GetFileType
TlsFree
GetCurrentThreadId
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
LoadLibraryA
InitializeCriticalSection
GetCPInfo
RtlUnwind
HeapSize
GetLocaleInfoA
GetLocaleInfoW
LCMapStringA
GetStringTypeA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetEnvironmentVariableA

shell32

SHFileOperationW

iphlpapi

SetIpNetEntry

scarddlg

ord2

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f7349e12554dfb3b213ada41a049ae2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

iphlpapi

scarddlg

Sections

.text Size: 72KB - Virtual size: 71KB

.data Size: 35KB - Virtual size: 34KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 72KB - Virtual size: 71KB

.data
Size: 35KB - Virtual size: 34KB

.rsrc
Size: 5KB - Virtual size: 5KB