593d1f2e4f4e97f91d7f2a566cdd1a03e766ad95d8ab5be374298c7a8df45857

Sharing

Copy URL Twitter E-mail

General

Target

593d1f2e4f4e97f91d7f2a566cdd1a03e766ad95d8ab5be374298c7a8df45857
Size

712KB
MD5

6cbfc966a75cc35b1538c815d899ec10
SHA1

d37eb0aa9004d49ddf7bd8471ce5c77d9ed82fba
SHA256

593d1f2e4f4e97f91d7f2a566cdd1a03e766ad95d8ab5be374298c7a8df45857
SHA512

a404db422d2edc0079c6590a7f07bc7e4fef59744f424304457e17941c5206bab459f6ec3e8a289404bf12b2471b8f81e2b6fcf53bd498a24ad6c367df3e7997
SSDEEP

12288:fAQwS+e128lASKpmP84IyiiZV26ioxM9fJvyZJFzLck0iszvO94ACYm:8xeU8l6j9y46HxMBt+JFsUszvo4ACYm

Score

N/A

Malware Config

Signatures

Files

593d1f2e4f4e97f91d7f2a566cdd1a03e766ad95d8ab5be374298c7a8df45857
.exe windows x86

74088a7e9c4af1a683750dd26e09200c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

kernel32

Sleep
GetSystemTime
InterlockedExchange
TerminateThread
TerminateProcess
GetProcAddress
InterlockedIncrement
OpenMutexA
LoadLibraryA
LoadLibraryW
CreateFileA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
MultiByteToWideChar
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
GetStringTypeA
GetStringTypeW
ReadFile
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FlushFileBuffers
HeapSize
LCMapStringA
LCMapStringW
RtlUnwind
GetLocaleInfoA
SetFilePointer
CloseHandle
SetStdHandle

user32

ShowWindow
SendMessageA
DestroyWindow

winmm

auxSetVolume

Exports

Exports

?LORPE01@@YAKK@Z
?LORPE02@@YAKK@Z

Sections

.itext
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.INIT3
Size: 4KB - Virtual size: 210B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 656KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74088a7e9c4af1a683750dd26e09200c

Headers

File Characteristics

Imports

kernel32

user32

winmm

Exports

Exports

Sections

.itext Size: 4KB - Virtual size: 1KB

.INIT3 Size: 4KB - Virtual size: 210B

.text Size: 24KB - Virtual size: 20KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 656KB - Virtual size: 1.0MB

.itext
Size: 4KB - Virtual size: 1KB

.INIT3
Size: 4KB - Virtual size: 210B

.text
Size: 24KB - Virtual size: 20KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 656KB - Virtual size: 1.0MB