6881dca93afd5f6e5c5a4722030d83e8f9d2803b7b1723fbe9681fd6e885a53d

Sharing

Copy URL Twitter E-mail

General

Target

6881dca93afd5f6e5c5a4722030d83e8f9d2803b7b1723fbe9681fd6e885a53d
Size

93KB
MD5

203e03f8c8403d2e95957f75afbe9260
SHA1

256ab47d68a16636262f1749b518c4576e594774
SHA256

6881dca93afd5f6e5c5a4722030d83e8f9d2803b7b1723fbe9681fd6e885a53d
SHA512

1d7b4c21ea8239a7e815974c25b444a1354ce2f5af151126166f8b2fefd31b41e0e820397f2ee110c19becce3b48fd1bce7c5219d3282e965ac9da8e989a9a50
SSDEEP

1536:L+f2PuAOjuNGd4HYq0IIKEtbZuQeYjuMMBiyriS57wGHv/94eBZjhJr:Lw6uAOjuNGd8YqBEh0yjux0G7x9Dr

Score

N/A

Malware Config

Signatures

Files

6881dca93afd5f6e5c5a4722030d83e8f9d2803b7b1723fbe9681fd6e885a53d
.exe windows x86

8b5f16ecc2ebc67011fbb9f8a67ec261

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileExA
GetTickCount
GetSystemDirectoryA
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

instlsp

Install

msvcp100

?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?good@ios_base@std@@QBE_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?width@ios_base@std@@QAE_J_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ

msvcr100

?what@exception@std@@UBEPBDXZ
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
exit
__initenv
_initterm
_initterm_e
??2@YAPAXI@Z
__setusermatherr
_commode
_fmode
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_invoke_watson
_controlfp_s
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
_CxxThrowException
memcpy
??3@YAXPAX@Z
memmove
tolower
printf
getchar
memset
sprintf_s
__CxxFrameHandler3
strlen
_configthreadlocale
??0exception@std@@QAE@ABV01@@Z

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8b5f16ecc2ebc67011fbb9f8a67ec261

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

instlsp

msvcp100

msvcr100

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 980B

.rsrc Size: 69KB - Virtual size: 72KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 980B

.rsrc
Size: 69KB - Virtual size: 72KB