d6455b7a7c55ee4de4f0c39d3ba408f48566c5aad8fba52b77004e07e5d0c144

Sharing

Copy URL Twitter E-mail

General

Target

d6455b7a7c55ee4de4f0c39d3ba408f48566c5aad8fba52b77004e07e5d0c144
Size

322KB
MD5

71050fee7b89b33b999289ab6afddb29
SHA1

9e3ffdbe5dff6f978695850935911102d1067677
SHA256

d6455b7a7c55ee4de4f0c39d3ba408f48566c5aad8fba52b77004e07e5d0c144
SHA512

2626628a48560a05725e0cc3bbdddce2d3d182bd9e8b946fa541e201596d396b8ebfc78556969aa7fe6e29740969c1dde233da5799bde82c73eb34db33194d74
SSDEEP

6144:84stLibOnsQR1Id1FN3F86oX4t5IqrQ984uLOfggxDD:84sxibyPR1eZi6V5jzegSD

Score

N/A

Malware Config

Signatures

Files

d6455b7a7c55ee4de4f0c39d3ba408f48566c5aad8fba52b77004e07e5d0c144
.exe windows x86

a1011808f6bcb162775c8fb7ccc3f3ba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleOutputCP
GetStdHandle
VirtualAlloc
SetConsoleCtrlHandler
GetACP
GetModuleFileNameA
VirtualProtect
CloseHandle
DeleteFileW
GetModuleFileNameW
SizeofResource
GetConsoleMode
WideCharToMultiByte
WriteFile
GetModuleHandleW
WaitForSingleObject
CreateProcessW
LoadResource
FindResourceW
FindResourceExW
VirtualQuery
LockResource
GetCommandLineW
RaiseException
MultiByteToWideChar
GetTickCount
GetProcAddress
CreateFileW
GetTempPathW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetLastError
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
Sleep
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
LoadLibraryA
SetStdHandle
WriteConsoleA
WriteConsoleW
ReadFile
CreateFileA
FlushFileBuffers
GetModuleHandleA

ole32

CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocStringLen
VariantClear

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.xrdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PACK
Size: 144KB - Virtual size: 380KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a1011808f6bcb162775c8fb7ccc3f3ba

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

oleaut32

Sections

.text Size: 81KB - Virtual size: 80KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 7KB - Virtual size: 7KB

.xrdata Size: 68KB - Virtual size: 68KB

PACK Size: 144KB - Virtual size: 380KB

.text
Size: 81KB - Virtual size: 80KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 7KB - Virtual size: 7KB

.xrdata
Size: 68KB - Virtual size: 68KB

PACK
Size: 144KB - Virtual size: 380KB