afa6061d27d829f0607f7ff8309c7ec1d90006435d40a29e77c84c69407a4b43

Sharing

Copy URL Twitter E-mail

General

Target

afa6061d27d829f0607f7ff8309c7ec1d90006435d40a29e77c84c69407a4b43
Size

177KB
MD5

179d1cbdee517cdc8181715dacc20620
SHA1

2e97ae21f3bf2712be33f663a018c3af76c35305
SHA256

afa6061d27d829f0607f7ff8309c7ec1d90006435d40a29e77c84c69407a4b43
SHA512

5479401182d91518fdea14e9c943c782762a855879a3319e8cc83e8c3404e6a0cca927e04cc6dd2250e5edf58f674819a81f98d9b2ba900c1381e0186eaa737b
SSDEEP

3072:LFG/OTOo3SvBFMPET+tg1RfLX/fRvnaq1Mbai9W6eVzoW2A5/p+eAdYNt6UC+EZ:o0Oo3SvBFp1pBj8aio6OoWnVkyt4

Score

N/A

Malware Config

Signatures

Files

afa6061d27d829f0607f7ff8309c7ec1d90006435d40a29e77c84c69407a4b43
.exe windows x86

9776dd158ff411257781736751f71e19

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileW
GetConsoleAliasExesLengthA
WritePrivateProfileSectionA
QueryDosDeviceA
VirtualFree
GetNumberFormatA
GetPrivateProfileStringW
GetSystemWindowsDirectoryA
HeapDestroy
LocalReAlloc
CreateFileW
lstrlenW
ReleaseSemaphore
FindClose
GetPrivateProfileStringA
SetCurrentDirectoryW
DeviceIoControl
GlobalAddAtomW
WriteFile
IsDBCSLeadByte
GetDiskFreeSpaceExA
SetThreadContext
GetQueuedCompletionStatus
OpenSemaphoreA
ProcessIdToSessionId
AddConsoleAliasA
GetFileType
WriteProfileStringA
EnumResourceNamesA
GetCurrentProcessId
FileTimeToDosDateTime
OpenFile
GetLocaleInfoA
SetWaitableTimer
GlobalAddAtomA
GetComputerNameW
FindNextVolumeMountPointA
FindResourceExA
WritePrivateProfileSectionW
IsValidLanguageGroup
GetVolumePathNameA
FindNextVolumeMountPointW
SetThreadLocale
VirtualAlloc
GetConsoleScreenBufferInfo
GetProfileStringA
QueryDosDeviceW
GetDiskFreeSpaceA
DuplicateHandle
GlobalReAlloc

ntdll

_allmul
_allshl
_aulldiv

Exports

Exports

?GienDansCarpfedspeakegerSerseh@@YGGPCUFiloBongBirler@@PCUVertGyriJupeAltoden@@ACN@Z
?JokeToomFeelcragHootBuffmasbi@@YGGACUNowttaosTareMeed@@_W@Z
?LilomakesandtoedSagyfir@@YGXACUDugswizli@@UGhatMulerazeLouthoe@@ACDACUPuntScag@@AC_K@Z
?MashTegsKoelRoutkitet@@YGKPCUSoupbilkwaulfe@@UtagMSG@@PCUGetaAgueleade@@ACIPCH@Z

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9776dd158ff411257781736751f71e19

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

Exports

Exports

Sections

.text Size: 75KB - Virtual size: 74KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 20B

.reloc Size: 99KB - Virtual size: 98KB

.text
Size: 75KB - Virtual size: 74KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 20B

.reloc
Size: 99KB - Virtual size: 98KB