2ccb7d384fa814be0027b258607a4678c1abd2d8ea0336da1cd2298fcb0f3326

Sharing

Copy URL Twitter E-mail

General

Target

2ccb7d384fa814be0027b258607a4678c1abd2d8ea0336da1cd2298fcb0f3326
Size

559KB
MD5

814ba0ec4ef7f02997cac446f74c69d0
SHA1

91bdf33142c52e7a1bc0a65af6430bc85813f5c0
SHA256

2ccb7d384fa814be0027b258607a4678c1abd2d8ea0336da1cd2298fcb0f3326
SHA512

99cee665875b1868863579b139d614d61408494a7d12d00fdb429a2782eaac7025e94b2a74a7594b9d8b98884ccc0d2387d9c08fa8095b9cbd27e561576b039b
SSDEEP

12288:owFcSx6uOnlDXkvI8vw9W1v3WWF2710Q8UYoxi7:VFNx6uSlz784SWWF2/8UYoU

Score

N/A

Malware Config

Signatures

Files

2ccb7d384fa814be0027b258607a4678c1abd2d8ea0336da1cd2298fcb0f3326
.exe windows x64

61c5fc84e1f5168a3d606eabc11aa074

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

logmeinsystray

?MessagePump@@YAXUtagMSG@@@Z
?RAGuiInit@@YAHXZ
?RAGuiCleanup@@YAXXZ

user32

GetMessageA

kernel32

QueryPerformanceCounter
RtlLookupFunctionEntry
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RtlUnwindEx
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
FlsGetValue
FlsSetValue
TlsFree
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapReAlloc
RtlVirtualUnwind

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vmp0
Size: 508KB - Virtual size: 1.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

61c5fc84e1f5168a3d606eabc11aa074

Headers

DLL Characteristics

File Characteristics

Imports

logmeinsystray

user32

kernel32

Sections

.text Size: 26KB - Virtual size: 26KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 8KB

.pdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 1024B - Virtual size: 596B

.vmp0 Size: 508KB - Virtual size: 1.8MB

.text
Size: 26KB - Virtual size: 26KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 8KB

.pdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 1024B - Virtual size: 596B

.vmp0
Size: 508KB - Virtual size: 1.8MB