4a2f7d79df9b4116e279bb0c707ee698e32fb5f69a89804243204212161b7cc3

Sharing

Copy URL

Twitter E-mail

General

Target

4a2f7d79df9b4116e279bb0c707ee698e32fb5f69a89804243204212161b7cc3
Size

428KB
MD5

681dbadcd69e8b018d930832ec542c90
SHA1

5f4e2700da38386b3bca42ff09f72c89ecd136ad
SHA256

4a2f7d79df9b4116e279bb0c707ee698e32fb5f69a89804243204212161b7cc3
SHA512

e276f7b72b45e85edbf6464afa3fe09577f663e740b159963778b6c830e88922dff2ebc5b702c9c375afddc4f3664d14fdde8c7c50b6697d025c722b049748a7
SSDEEP

12288:4vRfVHstwL79qd+I2XLaAzi77+DHRRJhnQ9z8hPMWVl:goBAGExRJhnQCMWz

Score

N/A

Malware Config

Signatures

Files

4a2f7d79df9b4116e279bb0c707ee698e32fb5f69a89804243204212161b7cc3
.exe windows x86

54c979e53d4a3427212b5d1e7edb8804

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
VirtualAlloc
GetOEMCP
InterlockedDecrement
GetEnvironmentStrings
GetTickCount
GetVersionExA
ExitProcess
WaitForSingleObject
SetHandleCount
GetConsoleMode
DeleteCriticalSection
LocalFree
InterlockedExchange
GetFileSize
LCMapStringW
GetEnvironmentStringsW
TryEnterCriticalSection
RaiseException
FlushFileBuffers
GetVersionExW
GetStdHandle
InitializeCriticalSection
HeapAlloc
WideCharToMultiByte
GetModuleHandleW
InterlockedCompareExchange
CreateFileA
FreeEnvironmentStringsW
FindClose
LeaveCriticalSection
TerminateProcess
QueryPerformanceCounter
GetProcessHeap
LoadLibraryA
WaitForSingleObjectEx
EnterCriticalSection
InterlockedIncrement
FormatMessageW
CreateFileW
HeapDestroy
CreateThread
SetFilePointerEx
FreeLibraryAndExitThread
GetCurrentProcess
GetACP
WriteFile
GetModuleHandleA
GetModuleFileNameA
HeapFree
CloseHandle
Sleep
FreeLibrary
CreateEventW
SetEvent
MultiByteToWideChar
ReadFile
SetErrorMode
GetModuleFileNameW
SetFilePointer
lstrlenW
GetCurrentThread
GetCommandLineA
GetCommandLineW
CreateEventA
CompareStringW
CompareStringA
GetStringTypeW
CreateMutexA
GetStartupInfoA
GetVersion
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
HeapCreate
VirtualFree
RtlUnwind
FatalAppExitA
GetCPInfo
HeapReAlloc
IsBadWritePtr
GetProcAddress
LCMapStringA
GetStringTypeA
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
SetEnvironmentVariableA

ole32

CoReleaseMarshalData

iphlpapi

GetTcpStatisticsEx

Sections

.text
Size: 376KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54c979e53d4a3427212b5d1e7edb8804

Headers

File Characteristics

Imports

kernel32

ole32

iphlpapi

Sections

.text Size: 376KB - Virtual size: 372KB

.code Size: 12KB - Virtual size: 10KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 16KB - Virtual size: 24KB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 376KB - Virtual size: 372KB

.code
Size: 12KB - Virtual size: 10KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 16KB - Virtual size: 24KB

.rsrc
Size: 12KB - Virtual size: 9KB