d811edbe59aad0d7f07cb67b14917359c0b0e130fde1e7b850ee1277323d516f

Sharing

Copy URL Twitter E-mail

General

Target

d811edbe59aad0d7f07cb67b14917359c0b0e130fde1e7b850ee1277323d516f
Size

394KB
MD5

6184091cb0eb6e0d804808b4da3d04d6
SHA1

6e09208f63f257cda47db8a97aba56cfb1fa0ac9
SHA256

d811edbe59aad0d7f07cb67b14917359c0b0e130fde1e7b850ee1277323d516f
SHA512

b48bf29a625030574e970adf1d957168836b1384058967d7ba9cc2db2d8793953f6ae2aa6f24c0a11b053dc3a545b2f7f29ab210d0a5aac462f401f9e3b65b74
SSDEEP

6144:GKAi03exybHFPDEwoDC9OdM1SMkSx2+ADiGPQUXTakHaHhdYkPf07HEP4KFZ:zw3ztYwoD+Od9MkeAeGbjak6AkP3P

Score

N/A

Malware Config

Signatures

Files

d811edbe59aad0d7f07cb67b14917359c0b0e130fde1e7b850ee1277323d516f
.exe windows x86

33165d286cd28107fd30dd5371aef143

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

EmptyWorkingSet
InitializeProcessForWsWatch
GetWsChanges
GetProcessMemoryInfo
GetProcessImageFileNameW
GetPerformanceInfo
GetModuleInformation
GetModuleFileNameExW
GetModuleBaseNameW
GetMappedFileNameW
GetDeviceDriverFileNameW
GetDeviceDriverBaseNameW
EnumProcesses
EnumProcessModules
EnumDeviceDrivers
QueryWorkingSet

winscard

SCardRemoveReaderFromGroupW
SCardReleaseStartedEvent
SCardLocateCardsA
SCardListReadersW
SCardListReaderGroupsW
SCardIsValidContext
SCardIntroduceReaderGroupW
SCardGetAttrib
SCardForgetReaderGroupW
SCardForgetReaderW
SCardEstablishContext
SCardConnectW
SCardCancel
SCardBeginTransaction

kernel32

TerminateProcess
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapSize
SetEndOfFile
ReadFile
LCMapStringW
HeapReAlloc
GetStringTypeW
CreateFileW
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
CreateFileA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
Sleep
SetStdHandle
SetFilePointer
MultiByteToWideChar
WriteConsoleW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapDestroy
WritePrivateProfileStringW
VirtualProtect
GetSystemDirectoryW
HeapAlloc
GetProcessHeap
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetLastError
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
HeapFree
CloseHandle
RtlUnwind
IsProcessorFeaturePresent
GetProcAddress
GetModuleHandleW
ExitProcess
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapCreate

Sections

.text
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33165d286cd28107fd30dd5371aef143

Headers

DLL Characteristics

File Characteristics

Imports

psapi

winscard

kernel32

Sections

.text Size: 288KB - Virtual size: 287KB

.rdata Size: 54KB - Virtual size: 54KB

.data Size: 35KB - Virtual size: 176KB

.rsrc Size: 15KB - Virtual size: 15KB

.text
Size: 288KB - Virtual size: 287KB

.rdata
Size: 54KB - Virtual size: 54KB

.data
Size: 35KB - Virtual size: 176KB

.rsrc
Size: 15KB - Virtual size: 15KB