359f19814b37e9687059216d16456d040a95f0c07290ed9cf334adcb349d7da1

Sharing

Copy URL Twitter E-mail

General

Target

359f19814b37e9687059216d16456d040a95f0c07290ed9cf334adcb349d7da1
Size

230KB
MD5

132ea4870d9be41e6d5645384699f924
SHA1

be446865efcc404ecd99c21bc950f8c9099c888f
SHA256

359f19814b37e9687059216d16456d040a95f0c07290ed9cf334adcb349d7da1
SHA512

a3c22348a1114026198034f451f9860512880225bfad1db985cacdc0056c6f995dde8273e07e82a77d6d6e4b81531b46898233ae7dff4040fb2d959547220c7e
SSDEEP

3072:vYdTJSxNPIl1UAHgmTPCbO1GTP2c1fIi5e2KoT0kXvFXTdJZ5KA:ETwxNPIl2OTqb2GTPfLMY

Score

N/A

Malware Config

Signatures

Files

359f19814b37e9687059216d16456d040a95f0c07290ed9cf334adcb349d7da1
.exe windows x86

caa150529948967a5388655d8583af51

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
ReadFileEx
GetProcAddress
GetOverlappedResult
LocalAlloc
SetStdHandle
GetModuleHandleA
ReplaceFileA
GetSystemTimeAsFileTime
GetLastError
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetModuleHandleW
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
CloseHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetHandleCount
GetFileType
SetFilePointer
GetFullPathNameA
GetCurrentDirectoryA
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
CreateFileA
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetEndOfFile
GetProcessHeap
ReadFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateDirectoryA

user32

OffsetRect

advapi32

ObjectDeleteAuditAlarmA
FindFirstFreeAce

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 94KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

caa150529948967a5388655d8583af51

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 120KB - Virtual size: 119KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 94KB - Virtual size: 102KB

.text
Size: 120KB - Virtual size: 119KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 94KB - Virtual size: 102KB