13cbfb0d228a13686e49edef3bff37671d41801d05ecf5edbfd8bd003fd6ebd5

Sharing

Copy URL Twitter E-mail

General

Target

13cbfb0d228a13686e49edef3bff37671d41801d05ecf5edbfd8bd003fd6ebd5
Size

379KB
MD5

917691047df79b7ede197926800e4f40
SHA1

a8fe89f47366145dd47b6d9d770743bd367caefc
SHA256

13cbfb0d228a13686e49edef3bff37671d41801d05ecf5edbfd8bd003fd6ebd5
SHA512

3a00cf999b691eb9d736db46176d186484d31658e009ef5fa6a55b3610e476c03c1209a40179d9fd80da0e26929b9c52b0e88d2ed39d5dbcd1722017b061b9d5
SSDEEP

6144:sjQUKk4KampW6SzterRC+mybyARP5WC5vnQnXZHmjbcYWb7lAix:sjQUKV8W6SzErgybybC5YnXgjbfSJhx

Score

N/A

Malware Config

Signatures

Files

13cbfb0d228a13686e49edef3bff37671d41801d05ecf5edbfd8bd003fd6ebd5
.exe windows x86

9cca78bead02d464110d78585d9b21ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

CommandLineToArgvW

shlwapi

PathFileExistsW

kernel32

WriteConsoleW
GetStdHandle
GetLastError
LocalAlloc
LocalSize
CreateFileW
CreateMutexW
OpenProcess
SetLastError
CloseHandle
GetCommandLineW
SetEndOfFile
LocalFree
EnterCriticalSection
VirtualQueryEx
ReadProcessMemory
TerminateProcess
VirtualProtectEx
VirtualAllocEx
WriteProcessMemory
FreeLibrary
LoadLibraryExW
GetCurrentProcess
GetModuleHandleW
GetProcAddress
FormatMessageW
GetEnvironmentVariableW
CreateDirectoryW
GetCurrentThreadId
GetCurrentProcessId
GetSystemTime
WriteFile
GetNamedPipeInfo
ReadFile
GetFileType
WideCharToMultiByte
MultiByteToWideChar
WaitForSingleObject
InitializeCriticalSection
LeaveCriticalSection
SetEnvironmentVariableA
DeleteCriticalSection
ReleaseMutex
GetVolumeInformationA
GetModuleFileNameW
GetModuleHandleExW
LoadLibraryW
GetStringTypeW
EncodePointer
DecodePointer
HeapFree
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
GetProcessHeap
ExitProcess
HeapSize
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapReAlloc
GetTimeZoneInformation
OutputDebugStringW
ReadConsoleW
SetStdHandle

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Sections

.text
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9cca78bead02d464110d78585d9b21ef

Headers

DLL Characteristics

File Characteristics

Imports

shell32

shlwapi

kernel32

advapi32

Sections

.text Size: 291KB - Virtual size: 291KB

.rdata Size: 59KB - Virtual size: 59KB

.data Size: 11KB - Virtual size: 20KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 15KB - Virtual size: 15KB

.text
Size: 291KB - Virtual size: 291KB

.rdata
Size: 59KB - Virtual size: 59KB

.data
Size: 11KB - Virtual size: 20KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 15KB - Virtual size: 15KB