9997f734042a126c569e40e4d35cae8e3c8a4e491c5dd1f5c09468c546c8e112

Sharing

Copy URL Twitter E-mail

General

Target

9997f734042a126c569e40e4d35cae8e3c8a4e491c5dd1f5c09468c546c8e112
Size

263KB
MD5

7a489c8cf696d5327caaade29a35c250
SHA1

ab7e825e46272585f3671dbb27030f6cdba072e5
SHA256

9997f734042a126c569e40e4d35cae8e3c8a4e491c5dd1f5c09468c546c8e112
SHA512

48b6277d345ce9a32f426f213ba5ce8baeb35d78eaf6c0f5df178eb360becfb3dc04541c91d7f72f0a58d5b850bd59053201c7b01c24e1494783cd6187ce1be1
SSDEEP

6144:bTqTiBY9WrHnppVTNaIZq1juA7lKNHiohN:b2YY9MHnPVTNaIYRr7lWCohN

Score

N/A

Malware Config

Signatures

Files

9997f734042a126c569e40e4d35cae8e3c8a4e491c5dd1f5c09468c546c8e112
.exe windows x86

1c39fe18191cd8883f9bd4810c423506

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
fgetwc
fclose
towupper
_wtoi
iswdigit
_wcsicmp
wcscmp
vfwprintf
fwprintf
_wfopen
_vsnwprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
_itow
malloc
_iob
fputwc
iswspace
wcslen
getc
_filelength
fread
perror
swscanf
wprintf
_except_handler3
wcscat
wcsstr
wcscpy
free

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LocalSize
LocalAlloc
MultiByteToWideChar
GetFileSizeEx
SetFilePointerEx
RaiseException
SetThreadUILanguage
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LoadLibraryExW
LocalFree
GetFileType
WriteConsoleW
GetConsoleOutputCP
GetStdHandle
GetConsoleMode
SetConsoleMode
ReadConsoleW
FormatMessageW
ReadFile
CreateThread
InterlockedExchange
WaitForMultipleObjects
GetExitCodeThread
InterlockedIncrement
Sleep
EnterCriticalSection
LeaveCriticalSection
GetSystemInfo
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
DeleteFileW
GetTempPathW
GetTempFileNameW
CreateFileW
WideCharToMultiByte
GetLastError
WriteFile

wldap32

ord214
ord14
ord88
ord145
ord159
ord36
ord167
ord127
ord190
ord79
ord77
ord73
ord97
ord133
ord53
ord42
ord62
ord105
ord108
ord149
ord152
ord21
ord40
ord18
ord13
ord29
ord142
ord194
ord12
ord41
ord140
ord26
ord208
ord147
ord224
ord179
ord135
ord16
ord206
ord27
ord191
ord118

urlmon

URLDownloadToFileW

user32

wsprintfW

netapi32

NetApiBufferFree
DsGetDcNameW

ntdll

wcsncat
iswctype
towlower
qsort
swprintf
_wcsnicmp
RtlEnumerateGenericTable
RtlDeleteElementGenericTable
RtlIsGenericTableEmpty
RtlInitializeGenericTable
RtlLookupElementGenericTable
RtlNumberGenericTableElements
RtlInsertElementGenericTable
_allmul

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 192KB - Virtual size: 1.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1c39fe18191cd8883f9bd4810c423506

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

wldap32

urlmon

user32

netapi32

ntdll

Sections

.text Size: 49KB - Virtual size: 48KB

.data Size: 3KB - Virtual size: 19KB

.rsrc Size: 18KB - Virtual size: 17KB

.vmp0 Size: 192KB - Virtual size: 1.3MB

.text
Size: 49KB - Virtual size: 48KB

.data
Size: 3KB - Virtual size: 19KB

.rsrc
Size: 18KB - Virtual size: 17KB

.vmp0
Size: 192KB - Virtual size: 1.3MB