935cbc50727943de09fc091a7233357305428fa10208c3ab69311f1b5c64ef82

Sharing

Copy URL Twitter E-mail

General

Target

935cbc50727943de09fc091a7233357305428fa10208c3ab69311f1b5c64ef82
Size

739KB
MD5

6b16a98232c7094d0fa92531b2278d50
SHA1

b83609870bc1f0ba1fadc29e38ca73ce3a347ed2
SHA256

935cbc50727943de09fc091a7233357305428fa10208c3ab69311f1b5c64ef82
SHA512

2d2f07fcfde9f09bc0aec0413c965ba19d3b2f31b9984f5fbc28cd8b699d9aab8eec2392707398195504f840377ffeee7cf18898908e2b2a21b9ab4978f030ae
SSDEEP

12288:F99SwyMrP9QgbsGydjsvwK8RwHqjw/+qCsShpSoCOj6sMtERfsWzCZ5po:lrrP2gRwK4wHh+qCsSnFCIDvRflU

Score

N/A

Malware Config

Signatures

Files

935cbc50727943de09fc091a7233357305428fa10208c3ab69311f1b5c64ef82
.exe windows x86

1bef53eb84e3d205afe6b382e6bb41c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceW
SizeofResource
LockResource
LoadResource
FindResourceExW
LoadLibraryExW
LoadLibraryExA
MultiByteToWideChar
LoadLibraryW
LoadLibraryA
GetLastError
Sleep
WaitForSingleObject
DeleteFileW
WideCharToMultiByte
GetWindowsDirectoryW
GetProcAddress
GetVolumeInformationW
CloseHandle
CreateFileW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapFree
HeapAlloc
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
FatalAppExitA
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringW
GetStringTypeW
HeapReAlloc
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
SetStdHandle
WriteConsoleW
FlushFileBuffers
GetProcessHeap

advapi32

OpenSCManagerW
CloseServiceHandle

wininet

HttpSendRequestW
InternetReadFile
HttpOpenRequestW

winhttp

WinHttpCrackUrl

Sections

.text
Size: 629KB - Virtual size: 629KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1bef53eb84e3d205afe6b382e6bb41c9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

wininet

winhttp

Sections

.text Size: 629KB - Virtual size: 629KB

.rdata Size: 78KB - Virtual size: 78KB

.data Size: 5KB - Virtual size: 15KB

.reloc Size: 25KB - Virtual size: 24KB

.text
Size: 629KB - Virtual size: 629KB

.rdata
Size: 78KB - Virtual size: 78KB

.data
Size: 5KB - Virtual size: 15KB

.reloc
Size: 25KB - Virtual size: 24KB