40d9af8c1b6dfbdb96be392aebd20b966d402b21ac7e9b1c29460c65d5e7beca

Sharing

Copy URL

Twitter E-mail

General

Target

40d9af8c1b6dfbdb96be392aebd20b966d402b21ac7e9b1c29460c65d5e7beca
Size

601KB
MD5

63595d35adac2e301feea2173af5a059
SHA1

227eba98b032bce58f737104da92053303134ae9
SHA256

40d9af8c1b6dfbdb96be392aebd20b966d402b21ac7e9b1c29460c65d5e7beca
SHA512

cae3a72087aa129d6c723d508db65367b5bf17911c736a5162bc106b962b0773006e37f1c9861b59c6a1e5d1cec4d33094099f5c48deb25c4c2873146d92995c
SSDEEP

12288:9iuHcDPIq+isr9ecy2UgfHYRqyguYzbSPvgIFsOKoGAvPCJN1Y:4uCPIqLsr9ecyiqB0mvBFSopCD

Score

N/A

Malware Config

Signatures

Files

40d9af8c1b6dfbdb96be392aebd20b966d402b21ac7e9b1c29460c65d5e7beca
.exe windows x86

f8e67da6c5cac69ad82e09097e851f70

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateProcessW
MoveFileW
CopyFileW
MoveFileExW
WideCharToMultiByte
GetModuleFileNameW
SetDllDirectoryW
GetLastError
MultiByteToWideChar
GetProcAddress
FreeLibrary
ReadFile
SetFilePointerEx
CreateFileW
TerminateProcess
GetCurrentProcess
GetEnvironmentVariableW
ExpandEnvironmentStringsW
LoadLibraryExW
SetEnvironmentVariableW
GetCommandLineW
HeapSetInformation
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
RtlUnwind
SetFilePointer
SetStdHandle
Sleep
LoadLibraryW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
HeapSize
FlushFileBuffers
CompareStringW
SetEnvironmentVariableA
LCMapStringW
GetStringTypeW
WriteConsoleW
SetEndOfFile
GetProcessHeap

user32

MessageBoxW

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vmp0
Size: 504KB - Virtual size: 1.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f8e67da6c5cac69ad82e09097e851f70

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 68KB - Virtual size: 68KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 5KB - Virtual size: 14KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 6KB - Virtual size: 5KB

.vmp0 Size: 504KB - Virtual size: 1.6MB

.text
Size: 68KB - Virtual size: 68KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 5KB - Virtual size: 14KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 6KB - Virtual size: 5KB

.vmp0
Size: 504KB - Virtual size: 1.6MB