dd349d62958977dfbac1d8dbb83176326b47cc81ca4930a885a38204cd5952c2

Sharing

Copy URL Twitter E-mail

General

Target

dd349d62958977dfbac1d8dbb83176326b47cc81ca4930a885a38204cd5952c2
Size

309KB
MD5

64f87da68a4663b4a7fff242cb1f524b
SHA1

f8bd7ecad1a21102a5409a41b37eff5dbcd3a8f2
SHA256

dd349d62958977dfbac1d8dbb83176326b47cc81ca4930a885a38204cd5952c2
SHA512

cdc7b857a309c8514dd738c06c74318601fccd0cdb759709540f014c7b15de546cefd1fe7be3bfe51d5e5ab1feac1871ae18bbaf95b6f3a2a68b1165f735bad0
SSDEEP

6144:ovUGjA60ZiUr+Nh6EZzjKrog64nS4jVafZTbQyhQ89+NF:ovUI0USjjvWTbQuQ

Score

N/A

Malware Config

Signatures

Files

dd349d62958977dfbac1d8dbb83176326b47cc81ca4930a885a38204cd5952c2
.exe windows x86

f433e7fcc51e68080022754836705744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mx8.q493
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mmkadhdm
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ltwntt4h
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hhvcncv3
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pyq24rvq
Size: 275KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gt3l2qf4
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kzruifi
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f433e7fcc51e68080022754836705744

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: - Virtual size: 392KB

mx8.q493 Size: - Virtual size: 76KB

.data Size: - Virtual size: 44KB

.rsrc Size: 512B - Virtual size: 4KB

mmkadhdm Size: - Virtual size: 44KB

ltwntt4h Size: - Virtual size: 4KB

hhvcncv3 Size: - Virtual size: 28KB

pyq24rvq Size: 275KB - Virtual size: 276KB

gt3l2qf4 Size: 28KB - Virtual size: 28KB

kzruifi Size: 4KB - Virtual size: 72KB

.text
Size: - Virtual size: 392KB

mx8.q493
Size: - Virtual size: 76KB

.data
Size: - Virtual size: 44KB

.rsrc
Size: 512B - Virtual size: 4KB

mmkadhdm
Size: - Virtual size: 44KB

ltwntt4h
Size: - Virtual size: 4KB

hhvcncv3
Size: - Virtual size: 28KB

pyq24rvq
Size: 275KB - Virtual size: 276KB

gt3l2qf4
Size: 28KB - Virtual size: 28KB

kzruifi
Size: 4KB - Virtual size: 72KB