495275148eb8f34d5d75e65f0b190e03e734354705e09d3c32e1ae3cb9ea159e

Sharing

Copy URL Twitter E-mail

General

Target

495275148eb8f34d5d75e65f0b190e03e734354705e09d3c32e1ae3cb9ea159e
Size

323KB
MD5

5ca483e469977fe4783bb5548c69465a
SHA1

93c12f2fd74d145020ec1c17fbb30094e5a14c87
SHA256

495275148eb8f34d5d75e65f0b190e03e734354705e09d3c32e1ae3cb9ea159e
SHA512

84524a3a6c66e82ee0c1a0e5387a6fd0995eb27bed14d8080fcba915b3eefaf60c77cb297615e4edfd4d0ca8340fc54f38352cd614b4cd47cef89671d057bef8
SSDEEP

6144:1XqY3QcMT01XP53YpmOULvfpqthWQIQBOIJO7MdOrliBQANX:16Y3Q/T01h3zzf63BOIJO7y4MX

Score

N/A

Malware Config

Signatures

Files

495275148eb8f34d5d75e65f0b190e03e734354705e09d3c32e1ae3cb9ea159e
.exe windows x86

3a7abe3fe6a272db4509499b60959cbb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
lstrlenA
GetCurrentProcess
OutputDebugStringW
GetCommandLineA
Sleep
GetModuleFileNameW
lstrcatA
lstrlenW
GetLastError
lstrcmpiA
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
CreateMutexA
OutputDebugStringA
lstrcpyA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetModuleHandleW
ExitProcess
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapFree
WideCharToMultiByte
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WriteFile
GetStdHandle
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapAlloc
RaiseException
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
CompareStringA
MultiByteToWideChar
CompareStringW
SetEnvironmentVariableA
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
LCMapStringW

user32

MessageBoxA

shell32

SHGetFileInfoA

ole32

CoCreateInstance
CoInitialize

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 142KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dccdpde
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.2rdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3a7abe3fe6a272db4509499b60959cbb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

ole32

Sections

.text Size: 52KB - Virtual size: 52KB

.rdata Size: 43KB - Virtual size: 43KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 142KB - Virtual size: 143KB

dccdpde Size: - Virtual size: 4KB

.2rdata Size: 80KB - Virtual size: 80KB

.text
Size: 52KB - Virtual size: 52KB

.rdata
Size: 43KB - Virtual size: 43KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 142KB - Virtual size: 143KB

dccdpde
Size: - Virtual size: 4KB

.2rdata
Size: 80KB - Virtual size: 80KB