8b0db51e65a56f7e47ed339644ae1270a7e4e595b460766d2841a7cd587e448a

Sharing

Copy URL Twitter E-mail

General

Target

8b0db51e65a56f7e47ed339644ae1270a7e4e595b460766d2841a7cd587e448a
Size

80KB
MD5

4cf479c0e1880d1722d84e6a245569c0
SHA1

b9379ec35270ae7807ccf2f3c53e476d6502c073
SHA256

8b0db51e65a56f7e47ed339644ae1270a7e4e595b460766d2841a7cd587e448a
SHA512

d062b5598c4d919fdf659299516a66f69828fd35b904049a08cee852efbc61bc65c97dbf84f340a2ffc44edaa9735a993588722ffdf6573527dd6b10b47959f4
SSDEEP

1536:ANaPz4TcV5C09M46W4hVB/VAzt+7zfzwDSf4+oKm+H32Ja+MhTxPk09bJ/Obof:ANaPz4TcVtMR+k7zf++oKm43uajhWCOc

Score

N/A

Malware Config

Signatures

Files

8b0db51e65a56f7e47ed339644ae1270a7e4e595b460766d2841a7cd587e448a
.exe windows x86

3c55102a0a2639a3d4fe91f8c0c3be5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
GetConsoleOutputCP
WriteConsoleW
GetConsoleMode
GetFileType
GetStdHandle
FormatMessageW
LocalFree
FreeLibrary
LoadLibraryExW
ReadConsoleW
SetConsoleMode
HeapSize
GetFullPathNameW
HeapAlloc
InterlockedCompareExchange
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
InterlockedExchange
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
WriteFile
HeapFree
HeapSetInformation
GetLastError
GetProcessHeap
Sleep
SetThreadPreferredUILanguages

msvcrt

__wgetmainargs
_wsetlocale
__CxxFrameHandler3
_controlfp
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
??1type_info@@UAE@XZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
memset
_wcsicmp
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
?terminate@@YAXXZ
_callnewh
malloc
_CxxThrowException
memcpy
towupper
wcsncmp
free
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
??0exception@@QAE@XZ
_wtoi64
_vsnwprintf

oleaut32

VariantClear
VariantInit
SysStringByteLen
SysAllocString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
VariantCopy
SysFreeString
SysStringLen

ole32

CoSetProxyBlanket
CoCreateInstance
CoInitializeSecurity
CoInitializeEx

profapi

ord103

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3c55102a0a2639a3d4fe91f8c0c3be5b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

oleaut32

ole32

profapi

Sections

.text Size: 54KB - Virtual size: 53KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 22KB - Virtual size: 22KB

.text
Size: 54KB - Virtual size: 53KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 22KB - Virtual size: 22KB