6dc2b239e26ffa7aa69e2c1b6ad8b35ced4a88ca0882f8629f0dfb6a77dd494a

Sharing

Copy URL

Twitter E-mail

General

Target

6dc2b239e26ffa7aa69e2c1b6ad8b35ced4a88ca0882f8629f0dfb6a77dd494a
Size

739KB
MD5

da1108515b9a14b41d2e19d6550c96c4
SHA1

0108494031aeed4ed01e1ee49e760e2be3081d96
SHA256

6dc2b239e26ffa7aa69e2c1b6ad8b35ced4a88ca0882f8629f0dfb6a77dd494a
SHA512

87e44e021ef283c1ddeedb850e5e10d9dc5b21e945fa76d16e2da1fb0894240913ec0e40154342f6c75d704046604f75fe7814fa02ddad43d54ae3aee5f29947
SSDEEP

12288:J4hal7ksqRgf8KbNSL1cdnD1fEeLPd0BiYqzj1GDUfxwdpxXPRAs:hAsPkKp8cNJEeLd1YiZPp0pxX/

Score

N/A

Malware Config

Signatures

Files

6dc2b239e26ffa7aa69e2c1b6ad8b35ced4a88ca0882f8629f0dfb6a77dd494a
.exe windows x86

6bbc7663798e1013c444518971f28390

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
VirtualAllocEx
WriteProcessMemory
GetModuleHandleA
GetProcAddress
QueueUserAPC
ResumeThread
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetModuleFileNameA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetLastError
SetUnhandledExceptionFilter
GetModuleHandleW
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
RtlUnwind
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
IsProcessorFeaturePresent

user32

MessageBoxA
wsprintfA

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.y/f
Size: 590KB - Virtual size: 589KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6bbc7663798e1013c444518971f28390

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 5KB - Virtual size: 8KB

.y/f Size: 590KB - Virtual size: 589KB

.reloc Size: 2KB - Virtual size: 1KB

.rsrc Size: 109KB - Virtual size: 109KB

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 5KB - Virtual size: 8KB

.y/f
Size: 590KB - Virtual size: 589KB

.reloc
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 109KB - Virtual size: 109KB