028153fef7ccf21d605cf20d1600663273faf17fc0aa6efe4d5af209f5798073

Sharing

Copy URL

Twitter E-mail

General

Target

028153fef7ccf21d605cf20d1600663273faf17fc0aa6efe4d5af209f5798073
Size

751KB
MD5

73e20711117eed146f782623fa6aa1fa
SHA1

b5a09b2c7f7a079e937c2ffe73ba6fdd3a976954
SHA256

028153fef7ccf21d605cf20d1600663273faf17fc0aa6efe4d5af209f5798073
SHA512

ad28e55abc7861e3b05a185f75cad860b693427a0ac538705140fc84d938488d5d28c89c9abd8db2a47e690ebd7811cac8498a8782ef14053ef6de61cc75591c
SSDEEP

12288:LPbCJWh0VI/pRFHQszZULB6JThypEiFPyxRerKjI57io+z0RAuR9gP3R8Idfb2ce:LPWJ+j/HZWoVhsPyxlINNoHuLg/dbVvW

Score

N/A

Malware Config

Signatures

Files

028153fef7ccf21d605cf20d1600663273faf17fc0aa6efe4d5af209f5798073
.exe windows x86

2978ab39f4c8ebdb6fac37e4d6c2c4bd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile
GetConsoleAliasA
InterlockedDecrement
SetVolumeMountPointW
GetSystemDefaultLCID
IsBadReadPtr
ConvertFiberToThread
GetGeoInfoW
WaitNamedPipeW
SetCommTimeouts
EnumResourceTypesA
SetFileShortNameW
LoadLibraryW
CreateEventA
GetFileAttributesA
DnsHostnameToComputerNameW
GetFileAttributesW
SetTimeZoneInformation
GetBinaryTypeW
IsBadStringPtrA
GetLastError
TlsGetValue
VirtualAlloc
HeapSize
SetComputerNameA
GlobalGetAtomNameA
LoadLibraryA
WriteConsoleA
LocalAlloc
GetFileType
AddAtomW
FoldStringW
FindNextFileA
GetModuleHandleA
VirtualProtect
GetFileAttributesExW
ReadConsoleInputW
GetVersion
SetFileValidData
SetFileAttributesW
LCMapStringW
GetProcAddress
CreateMutexW
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
GetModuleHandleW
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
Sleep
ExitProcess
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
DeleteCriticalSection
SetFilePointer
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
InitializeCriticalSectionAndSpinCount
ReadFile
CloseHandle
CreateFileA
SetStdHandle
FlushFileBuffers
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 600KB - Virtual size: 610KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2978ab39f4c8ebdb6fac37e4d6c2c4bd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

ole32

Sections

.text Size: 92KB - Virtual size: 91KB

.data Size: 600KB - Virtual size: 610KB

.rsrc Size: 49KB - Virtual size: 49KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 92KB - Virtual size: 91KB

.data
Size: 600KB - Virtual size: 610KB

.rsrc
Size: 49KB - Virtual size: 49KB

.reloc
Size: 8KB - Virtual size: 8KB