SquirrelsFlow_beta[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

SquirrelsFlow_beta.rar
Size

4.1MB
MD5

02c0d12bbff54248e4d07b700fdc4e9e
SHA1

7ccca0d363776a3745caaa931278635d9d5c66a6
SHA256

6865af3f02609dcdd2e339d3bf262682c3d3d4ab8e842254f7651f473bdcac3f
SHA512

3419c974059d08be76cdbbec40370c7722384339acc1f3a138d25e0ad2059f8ce7278be427daee4a845b5bba757438c6e7cc4bf557f638a02cac5f231b6f5100
SSDEEP

98304:csWr94VR+yYB6e4Kfqr8VsEzpw38/FlfZCc+R2y+j6AbwS9IpmuA3mEuS:csWuiZ6e4qskH/vZCcV7j6AECIpmuA31

Score

N/A

Malware Config

Signatures

Files

SquirrelsFlow_beta.rar
.rar
SquirrelsFlow_beta/Information.txt
SquirrelsFlow_beta/launcher v5.7.1.exe
.exe windows x86

a5eb0f81fa12ecd499c701ada492a1a8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

msvcrt

__getmainargs

Sections

.text
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 510KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BSJ0
Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.BSJ1
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BSJ2
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a5eb0f81fa12ecd499c701ada492a1a8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: - Virtual size: 1.1MB

.data Size: - Virtual size: 510KB

.rdata Size: - Virtual size: 47KB

.bss Size: - Virtual size: 2KB

.idata Size: - Virtual size: 2KB

.CRT Size: - Virtual size: 52B

.tls Size: - Virtual size: 8B

.BSJ0 Size: - Virtual size: 1.8MB

.BSJ1 Size: 1024B - Virtual size: 876B

.BSJ2 Size: 4.3MB - Virtual size: 4.3MB

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: - Virtual size: 1.1MB

.data
Size: - Virtual size: 510KB

.rdata
Size: - Virtual size: 47KB

.bss
Size: - Virtual size: 2KB

.idata
Size: - Virtual size: 2KB

.CRT
Size: - Virtual size: 52B

.tls
Size: - Virtual size: 8B

.BSJ0
Size: - Virtual size: 1.8MB

.BSJ1
Size: 1024B - Virtual size: 876B

.BSJ2
Size: 4.3MB - Virtual size: 4.3MB

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 5KB - Virtual size: 4KB