5f387dec6e80eb2e58faf9da13a9e1b71531704e0c56573d3d76f8e89c2f39fd

Sharing

Copy URL Twitter E-mail

General

Target

5f387dec6e80eb2e58faf9da13a9e1b71531704e0c56573d3d76f8e89c2f39fd
Size

590KB
MD5

4a880a5f38fb0ba56f3b7cc6e600c8b0
SHA1

ab17f7aa1214c07ec1f23dcd34c6c1c0a6db1640
SHA256

5f387dec6e80eb2e58faf9da13a9e1b71531704e0c56573d3d76f8e89c2f39fd
SHA512

242c570ff5dccd6f6fc5ba46c88ba00cf15db98b875048b73582b09ea763b34acbe8fe3ef242feb5200085871f36459f5fbbe11947af51724c45bd7efd16f498
SSDEEP

12288:VzzW6csbP79rJe6UMMvCDQ6sv39R2SjQ:NaSxrJe6UMMKe7

Score

N/A

Malware Config

Signatures

Files

5f387dec6e80eb2e58faf9da13a9e1b71531704e0c56573d3d76f8e89c2f39fd
.exe windows x64

cf7d07b6513857a567f24a1298aa75d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetTimeZoneInformation
ExpandEnvironmentStringsW
HeapFree
GetProcessHeap
HeapAlloc
CreateProcessW
lstrlenW
VerifyVersionInfoW
VerSetConditionMask
OutputDebugStringW
CompareStringW
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
SystemTimeToTzSpecificLocalTime
FlushFileBuffers
WriteFile
SetFilePointer
WideCharToMultiByte
GetSystemTime
GetModuleFileNameW
SetLastError
GetLastError
ReleaseMutex
WaitForSingleObject
CloseHandle
CreateMutexW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
GetStartupInfoW
OpenEventW
GetFileAttributesW
CreateDirectoryW
CreateFileW
GetSystemDirectoryW
LoadLibraryExW
GetVolumePathNameW
GetDriveTypeW
GetFileType
Sleep
GetCommandLineW
LoadLibraryW
FreeLibrary
GetProcAddress
GetFileSize

msvcrt

free
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
memmove
memcpy
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_cexit
_exit
_XcptFilter
__C_specific_handler
__wgetmainargs
_vsnwprintf
malloc
memset

ntdll

RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry

ole32

CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize
CoInitializeEx

advapi32

AllocateAndInitializeSid
CopySid
IsValidSid
FreeSid
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegEnumValueW
RegDeleteValueW
GetUserNameW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetLengthSid
RegCloseKey
RegOpenKeyExW
CheckTokenMembership

user32

IsWindow
PostMessageW

oleaut32

VariantInit
VariantClear

shlwapi

ord176
PathIsRootW
PathIsRelativeW
PathStripToRootW
StrChrW
StrRChrW
PathIsUNCW

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 266B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vmp1
Size: 540KB - Virtual size: 1.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cf7d07b6513857a567f24a1298aa75d7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

ntdll

ole32

advapi32

user32

oleaut32

shlwapi

Sections

.text Size: 43KB - Virtual size: 42KB

.data Size: 1KB - Virtual size: 4KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 266B

.vmp1 Size: 540KB - Virtual size: 1.8MB

.text
Size: 43KB - Virtual size: 42KB

.data
Size: 1KB - Virtual size: 4KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 266B

.vmp1
Size: 540KB - Virtual size: 1.8MB