8b89c12d7c343f2d987e75de06c792efb79305b4a802a01fd1317ab9740e9661

Sharing

Copy URL

Twitter E-mail

General

Target

8b89c12d7c343f2d987e75de06c792efb79305b4a802a01fd1317ab9740e9661
Size

116KB
MD5

783013dbb87adf327d0d424309bd7b90
SHA1

e0203c5cef5518a37622e64a5dee0f04df0410f2
SHA256

8b89c12d7c343f2d987e75de06c792efb79305b4a802a01fd1317ab9740e9661
SHA512

cd047a404ffa5bb04f3fe745c6b47a55ae3f482389b8530e15b9aaaa7356442f7e1210b858ce7a63841d3fb9c68c5ad3cde18dba52ad95a8704629d26fb9f3c7
SSDEEP

3072:ARn6maWAdHe4UTCFEzNoCWSDADeak7dJHB/Aa:U6mUHACFEzbWSsQLH5Aa

Score

N/A

Malware Config

Signatures

Files

8b89c12d7c343f2d987e75de06c792efb79305b4a802a01fd1317ab9740e9661
.exe windows x86

87e073c9e65639541b659df1f031ecda

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

tier0

CommandLine_Tier0
Error
ThreadWaitForObjects
Plat_IsInDebugSession
ReleaseThreadHandle
CreateSimpleThread
GetThreadedLoadLibraryFunc
?DevWarning@@YAXPBDZZ

kernel32

InterlockedIncrement
CreateFileW
LocalFree
FormatMessageA
GetLastError
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
LoadLibraryExA
FreeLibrary
GetDriveTypeW
GetFullPathNameA
GetCommandLineA
HeapSetInformation
GetSystemTimeAsFileTime
GetCurrentDirectoryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
CloseHandle
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
RtlUnwind
GetModuleHandleW
ExitProcess
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetProcessHeap
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
LCMapStringW
GetStringTypeW
Sleep
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
CreateFileA
LoadLibraryW
SetFilePointer
HeapReAlloc
HeapSize
WriteConsoleW
SetEndOfFile

Exports

Exports

CreateInterface

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

87e073c9e65639541b659df1f031ecda

Headers

DLL Characteristics

File Characteristics

Imports

tier0

kernel32

Exports

Exports

Sections

.text Size: 54KB - Virtual size: 53KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 14KB

.rsrc Size: 1024B - Virtual size: 708B

.reloc Size: 43KB - Virtual size: 43KB

.text
Size: 54KB - Virtual size: 53KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 14KB

.rsrc
Size: 1024B - Virtual size: 708B

.reloc
Size: 43KB - Virtual size: 43KB