4a660041e6d9a99416cfcb5a7b59ca77eabd11f8114f1d93cdcb3d1736a3fdb1

Sharing

Copy URL

Twitter E-mail

General

Target

4a660041e6d9a99416cfcb5a7b59ca77eabd11f8114f1d93cdcb3d1736a3fdb1
Size

394KB
MD5

74bf1428488cdd5516c4b4a52ec2bb2c
SHA1

0b02c46a1a018620b62d55edcc50fe182e7f0b85
SHA256

4a660041e6d9a99416cfcb5a7b59ca77eabd11f8114f1d93cdcb3d1736a3fdb1
SHA512

c364be73b365d40583a2b9ff415206a57ffb228212638e48a2534d93f05bbe8994e59e7cf142e18eac4a946bbcf96add2de8fad59dce36ef76627661a9a5f47b
SSDEEP

6144:GKAi03exybHFPDEwoDC9OdM1SMkSx2+ADiGPQUXTakHaHhdYkPf07HEP4KjZ:zw3ztYwoD+Od9MkeAeGbjak6AkP3P

Score

N/A

Malware Config

Signatures

Files

4a660041e6d9a99416cfcb5a7b59ca77eabd11f8114f1d93cdcb3d1736a3fdb1
.exe windows x86

33165d286cd28107fd30dd5371aef143

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

EmptyWorkingSet
InitializeProcessForWsWatch
GetWsChanges
GetProcessMemoryInfo
GetProcessImageFileNameW
GetPerformanceInfo
GetModuleInformation
GetModuleFileNameExW
GetModuleBaseNameW
GetMappedFileNameW
GetDeviceDriverFileNameW
GetDeviceDriverBaseNameW
EnumProcesses
EnumProcessModules
EnumDeviceDrivers
QueryWorkingSet

winscard

SCardRemoveReaderFromGroupW
SCardReleaseStartedEvent
SCardLocateCardsA
SCardListReadersW
SCardListReaderGroupsW
SCardIsValidContext
SCardIntroduceReaderGroupW
SCardGetAttrib
SCardForgetReaderGroupW
SCardForgetReaderW
SCardEstablishContext
SCardConnectW
SCardCancel
SCardBeginTransaction

kernel32

TerminateProcess
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapSize
SetEndOfFile
ReadFile
LCMapStringW
HeapReAlloc
GetStringTypeW
CreateFileW
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
CreateFileA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
Sleep
SetStdHandle
SetFilePointer
MultiByteToWideChar
WriteConsoleW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapDestroy
WritePrivateProfileStringW
VirtualProtect
GetSystemDirectoryW
HeapAlloc
GetProcessHeap
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetLastError
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
HeapFree
CloseHandle
RtlUnwind
IsProcessorFeaturePresent
GetProcAddress
GetModuleHandleW
ExitProcess
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapCreate

Sections

.text
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33165d286cd28107fd30dd5371aef143

Headers

DLL Characteristics

File Characteristics

Imports

psapi

winscard

kernel32

Sections

.text Size: 288KB - Virtual size: 287KB

.rdata Size: 54KB - Virtual size: 54KB

.data Size: 35KB - Virtual size: 176KB

.rsrc Size: 15KB - Virtual size: 15KB

.text
Size: 288KB - Virtual size: 287KB

.rdata
Size: 54KB - Virtual size: 54KB

.data
Size: 35KB - Virtual size: 176KB

.rsrc
Size: 15KB - Virtual size: 15KB