24a75546df0b2021f90237ea4eeded764fb9c3404f32ffa17a67f0cfbe39127a

Sharing

Copy URL Twitter E-mail

General

Target

24a75546df0b2021f90237ea4eeded764fb9c3404f32ffa17a67f0cfbe39127a
Size

513KB
MD5

5dd7f36d1c3583bd22efa4260d080c20
SHA1

b8f9d323bdd4864125c75cb7b0310a1003155ebc
SHA256

24a75546df0b2021f90237ea4eeded764fb9c3404f32ffa17a67f0cfbe39127a
SHA512

f3b5b1af58c3de6925901b7d146ee83e49a58ba8bb4e980f64ab6c29e1bf338b3d45f91e33cec4c2d5e06a3da393d4ae8fc5ca9861ac23a4ae369018ed6c22ea
SSDEEP

12288:yjDaR+TUkYGt/jDjKVgYIdswC/Q0S/Z5avLh:yjDaRrkG/KswCoFWLh

Score

N/A

Malware Config

Signatures

Files

24a75546df0b2021f90237ea4eeded764fb9c3404f32ffa17a67f0cfbe39127a
.exe windows x64

bb420431b5e66769c2b0e4adce751f3a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

LocalFree
GetVersion
GetProcAddress
GetVersionExA
GetModuleHandleW
VirtualAlloc
LocalAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep

msvcrt

?terminate@@YAXXZ
_commode
_fmode
_wcmdln
__C_specific_handler
_initterm
__setusermatherr
_cexit
_exit
rand_s
exit
__set_app_type
__wgetmainargs
_amsg_exit
_XcptFilter
wcstoul
wcscmp

ole32

CLSIDFromString
CoUninitialize
CoCreateInstance
CoInitializeEx

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 98B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vmp0
Size: 500KB - Virtual size: 1.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bb420431b5e66769c2b0e4adce751f3a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

ole32

Sections

.text Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 276B

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 98B

.vmp0 Size: 500KB - Virtual size: 1.8MB

.text
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 276B

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 98B

.vmp0
Size: 500KB - Virtual size: 1.8MB