219ce02deb272c5c019efc490dbb57b71e38df476c07e828e95b620ac73ab50d

Sharing

Copy URL Twitter E-mail

General

Target

219ce02deb272c5c019efc490dbb57b71e38df476c07e828e95b620ac73ab50d
Size

70KB
MD5

53b0310a762c45d90a87b54ee1efee70
SHA1

c0b3bfc557193bd448fb160a524d8a77e1e2ed12
SHA256

219ce02deb272c5c019efc490dbb57b71e38df476c07e828e95b620ac73ab50d
SHA512

0fb1415751cc7d006a70f62ef68de8fe086409c1cfb33bc3a660ab7a4000876e9d2df24aa95e1c5d1c763a1473296cb8ca3f555913bf2fb3440793fe23f6c47a
SSDEEP

1536:uExOGuXTVB5CRmZFxojMCweSlOXPmfYueGNKtEDYSm/:hx6XTf5C0xojMjeSlOe1LDYS

Score

N/A

Malware Config

Signatures

Files

219ce02deb272c5c019efc490dbb57b71e38df476c07e828e95b620ac73ab50d
.exe windows x64

4365182a5f94346a746f2b3d93131167

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ws2_32

WSAStartup

kernel32

MapViewOfFile
UnmapViewOfFile
GetModuleHandleW
VirtualFree
WriteFile
Sleep
CopyFileW
ReadFile
GetModuleFileNameW
CreateFileW
lstrlenW
GetLastError
GetProcAddress
VirtualAlloc
CreateFileMappingW
lstrcmpiW
OpenFileMappingW
CloseHandle
ExitProcess
GetCommandLineW
GetTempFileNameW
LoadLibraryW
GetTempPathW
CreateThread
GetEnvironmentVariableW
lstrlenA
GetDriveTypeW
CreateProcessW
MoveFileExW
GetFileSize
WideCharToMultiByte
lstrcatW
WinExec
GetVersion
GetSystemTime
lstrcpyW
FreeLibrary
HeapAlloc
HeapFree
GetProcessHeap
IsBadReadPtr
LoadLibraryA
VirtualProtect
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcess
TerminateProcess
RtlCaptureContext
SleepEx
GetStartupInfoW
GetCurrentThreadId
FlsSetValue
GetCommandLineA
GetLogicalDrives
HeapReAlloc
SetUnhandledExceptionFilter
DecodePointer
GetStdHandle
RtlUnwindEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry

user32

MessageBoxW
wsprintfW
SetTimer
TrackPopupMenu
PostMessageW
DialogBoxParamW
EndDialog
GetCursorPos
ShowWindow
SendMessageW
CallNextHookEx
PostQuitMessage

advapi32

RegQueryValueExW
RegOpenKeyW

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4365182a5f94346a746f2b3d93131167

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

advapi32

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 5KB - Virtual size: 17KB

.pdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 11KB - Virtual size: 10KB

.reloc Size: 1024B - Virtual size: 748B

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 5KB - Virtual size: 17KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 11KB - Virtual size: 10KB

.reloc
Size: 1024B - Virtual size: 748B