34b2c3652f7363853ac36ee9f75d0af1e0a7b48ff8b6045367a1737cdf1449d4

Sharing

Copy URL

Twitter E-mail

General

Target

34b2c3652f7363853ac36ee9f75d0af1e0a7b48ff8b6045367a1737cdf1449d4
Size

164KB
MD5

633bcb9cafea936207ed38522bde4556
SHA1

4042cafbb080a5619cdc7d881ba93cc219e9e34f
SHA256

34b2c3652f7363853ac36ee9f75d0af1e0a7b48ff8b6045367a1737cdf1449d4
SHA512

4fa6e5600b5d38abe8cbdd5e5a94011cbdcb56ab599095f69feba8e449cf8a31f6fdd3d58d829bbd3e562899fa37eb1138923b0d7e1b97435b5e126bffcc3bde
SSDEEP

3072:wfdyajjANnprFAz9bnMi4kipyVUjhOSyXs1Ij4crAx9Oy3oBLugkD9F8p:wfuNIz9zMv/jhOSy81IIxUyYBZ

Score

N/A

Malware Config

Signatures

Files

34b2c3652f7363853ac36ee9f75d0af1e0a7b48ff8b6045367a1737cdf1449d4
.exe windows x86

374eed7114c43ec9bc03033ff95a0b56

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

GetRequestedRuntimeInfo
GetRequestedRuntimeVersion
CorBindToRuntimeEx
GetCORVersion
LoadLibraryShim
GetRealProcAddress
CorGetSvc
GetCORSystemDirectory

msvcr80

_vsnprintf
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
?terminate@@YAXXZ
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__winitenv
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
free
malloc
_putws
_flushall
wcstoul
towupper
memmove
_vsnwprintf_s
_vsnprintf_s
_errno
wcsncpy_s
wcscpy_s
strcpy_s
wcsncmp
strncmp
strchr
_CxxThrowException
_wtoi
_wcsicmp
tolower
_wcsnicmp
exit
_purecall
memset
wcscat_s
__CxxFrameHandler3
memcpy
_vswprintf_c_l

advapi32

RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegCloseKey

kernel32

GetEnvironmentVariableA
GetCurrentDirectoryW
GetCurrentDirectoryA
GetFileAttributesExW
GetFileAttributesExA
GetFileAttributesW
GetFileAttributesA
CreateEventW
CreateEventA
CreateMutexW
CreateMutexA
LocalAlloc
FormatMessageA
FormatMessageW
CreateProcessA
CreateProcessW
DebugBreak
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
TlsSetValue
TlsAlloc
TlsFree
HeapAlloc
GetProcessHeap
HeapFree
WaitForSingleObjectEx
ReleaseMutex
SleepEx
VirtualAlloc
VirtualFree
VirtualQuery
VirtualProtect
HeapCreate
HeapDestroy
HeapValidate
InterlockedExchange
Sleep
SetUnhandledExceptionFilter
GetTickCount
UnhandledExceptionFilter
IsDebuggerPresent
CloseHandle
WaitForSingleObject
GetCurrentProcessId
GetLocalTime
WriteFile
GetStdHandle
RaiseException
GetConsoleOutputCP
SetErrorMode
SetLastError
GetLastError
TlsGetValue
InterlockedCompareExchange
GetModuleHandleA
FreeLibrary
InterlockedIncrement
InterlockedDecrement
GetCurrentProcess
GetEnvironmentVariableW
LocalFree
MultiByteToWideChar
IsDBCSLeadByte
GetCPInfo
GetACP
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetFilePointer
GetVersionExA
GetModuleHandleW
WideCharToMultiByte
lstrlenW
TerminateProcess
LoadLibraryExA
LoadLibraryExW
GetFullPathNameA
GetFullPathNameW
GetModuleFileNameA
GetModuleFileNameW
CreateFileA
CreateFileW
CopyFileA
DeleteFileA
MoveFileExW
CreateSemaphoreA
CreateSemaphoreW
LCMapStringA
LCMapStringW
GetVersionExW
OutputDebugStringA
OutputDebugStringW

oleaut32

SetErrorInfo
SysAllocString
SysFreeString

user32

LoadStringA
LoadStringW

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

374eed7114c43ec9bc03033ff95a0b56

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

msvcr80

advapi32

kernel32

oleaut32

user32

Sections

.text Size: 86KB - Virtual size: 85KB

.data Size: 512B - Virtual size: 2KB

.rsrc Size: 70KB - Virtual size: 72KB

.text
Size: 86KB - Virtual size: 85KB

.data
Size: 512B - Virtual size: 2KB

.rsrc
Size: 70KB - Virtual size: 72KB