bc99fd81c82de2394c558a3d8517803ab8b08bcca11be3fe2887060875a83c7d

General

Target

bc99fd81c82de2394c558a3d8517803ab8b08bcca11be3fe2887060875a83c7d
Size

603KB
MD5

765efd8d343725a38a1d57c78539397f
SHA1

ea4ca288b7d3f750f68e3c531d5c8479a9380351
SHA256

bc99fd81c82de2394c558a3d8517803ab8b08bcca11be3fe2887060875a83c7d
SHA512

5408f21247ae4304565f31716cc19f7bbffd4724d9882316edcb915e636fb9c0852689cef099a945ec3209783461b9e5f7563c069465fe64fd006a7435af726f
SSDEEP

12288:hkyefRU1It2OuBsteETIqcMThfBGVPygCPSq6A:Syefqa1znIqrNfBGH

Score

N/A

Malware Config

Signatures

Files

bc99fd81c82de2394c558a3d8517803ab8b08bcca11be3fe2887060875a83c7d
.exe windows x86

2af01cc12ebe639633495fc73ef08f98

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
GetLocalTime
GetSystemWindowsDirectoryA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoW

ole32

CoInitializeEx
CoUninitialize

msvcrt

exit
_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
fprintf
fflush
_amsg_exit
_initterm
_wcmdln
_XcptFilter
_exit
_cexit
__wgetmainargs
free
_callnewh
malloc
wcschr
fclose
fopen
memset

msdtctm

ord4

ntdll

RtlCaptureContext
RtlReportException

advapi32

DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vmp0
Size: 500KB - Virtual size: 1.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2af01cc12ebe639633495fc73ef08f98

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

msvcrt

msdtctm

ntdll

advapi32

Sections

.text Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 892B

.rsrc Size: 94KB - Virtual size: 94KB

.reloc Size: 1KB - Virtual size: 1KB

.vmp0 Size: 500KB - Virtual size: 1.6MB

.text
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 892B

.rsrc
Size: 94KB - Virtual size: 94KB

.reloc
Size: 1KB - Virtual size: 1KB

.vmp0
Size: 500KB - Virtual size: 1.6MB