73e9ceb1b752df5749e780576240ce15c82909b762d194bc32abeab6d91646d0

Sharing

Copy URL Twitter E-mail

General

Target

73e9ceb1b752df5749e780576240ce15c82909b762d194bc32abeab6d91646d0
Size

541KB
MD5

756a46c9a5eebbe9a56040ab9728d414
SHA1

efa401462e3f474b9ca74e6b5c75a7e13e2c43ec
SHA256

73e9ceb1b752df5749e780576240ce15c82909b762d194bc32abeab6d91646d0
SHA512

1020fab5a426e5d94b9b927bfec1a7db14239971a4d19c852daf9e68a3099c3a6ac8918f16ac0a732d71c448b9033023baf4777e3fcc293e21b5a7d4a72c0e20
SSDEEP

6144:Y9AWjuqg3qvOiCqobfsR3vLJZk+xQHs6q4/ZcRAh9z9Np4HtjlszLFZCUsfmC6G1:YXtg3qXjRvNVQHNSRAh9qYLFoUlK4+N

Score

N/A

Malware Config

Signatures

Files

73e9ceb1b752df5749e780576240ce15c82909b762d194bc32abeab6d91646d0
.exe windows x86

f6b5c3c91b16dd393af0117d6f2959c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent
OpenProcess
CloseHandle
DuplicateHandle
GetCurrentProcess
InterlockedIncrement
GetCurrentProcessId
ExitProcess
DeleteTimerQueueTimer
InterlockedExchange
WaitForMultipleObjects
CreateThread
CreateEventA
CreateTimerQueueTimer
DisconnectNamedPipe
ReadFile
ConnectNamedPipe
CreateNamedPipeA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
GetVersionExA
RtlUnwind
RaiseException
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
InterlockedDecrement
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
HeapReAlloc
HeapSize
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
IsBadWritePtr
VirtualQuery
IsBadReadPtr
IsBadCodePtr
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
InterlockedCompareExchange
Sleep
LoadLibraryExW
GetProcAddress
FreeEnvironmentStringsA
GetLastError
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
SetLastError
lstrcatW
lstrcpyW
InitializeCriticalSection
DeleteCriticalSection
WaitForSingleObject
ResetEvent
EnterCriticalSection
LeaveCriticalSection
InterlockedExchangeAdd
CreateMutexW
ReleaseMutex

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor

user32

wsprintfW

rpcrt4

UuidCreate

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 500KB - Virtual size: 1.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f6b5c3c91b16dd393af0117d6f2959c5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

rpcrt4

Sections

.text Size: 38KB - Virtual size: 38KB

.data Size: 1024B - Virtual size: 9KB

.rsrc Size: 1024B - Virtual size: 992B

.vmp0 Size: 500KB - Virtual size: 1.6MB

.text
Size: 38KB - Virtual size: 38KB

.data
Size: 1024B - Virtual size: 9KB

.rsrc
Size: 1024B - Virtual size: 992B

.vmp0
Size: 500KB - Virtual size: 1.6MB