acaf66c8e6c4122967233ca63ce26c0c71713de5a8e98689c252d0b06656eaa5

General

Target

acaf66c8e6c4122967233ca63ce26c0c71713de5a8e98689c252d0b06656eaa5
Size

884KB
MD5

5afef10abc7d0809567552a449fe5d4f
SHA1

04bbe1adddb0859e035c3f866b70cb2850aabef3
SHA256

acaf66c8e6c4122967233ca63ce26c0c71713de5a8e98689c252d0b06656eaa5
SHA512

0edf9d2d02689cfe6b68794f40a0887bc1d08db73c2477001044bb514b5e21a13f15eb918b6916d32346b3f531b7e841dc888ee0cc075e23c55900be98325f5d
SSDEEP

24576:Z1C+8qerhTi7GXlzi10Jz5KuejZC8v+5ZHGOFLQiqgOZ:aYYzi+JVKuejZC8vKFLQuOZ

Score

N/A

Malware Config

Signatures

Files

acaf66c8e6c4122967233ca63ce26c0c71713de5a8e98689c252d0b06656eaa5
.exe windows x64

6105c07c263e6f3acf5a63947bb6aaff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntdll

strrchr
memcmp
__chkstk
strcmp
wcslen
memset
strncpy
strncmp
strlen
strcpy
strcat
strstr
memcpy

kernel32

GetCurrentProcessId
GetCurrentProcess
GetCurrentThread
GetModuleHandleA
GetProcAddress
LoadLibraryA
CreateToolhelp32Snapshot
Process32First
Process32Next
MultiByteToWideChar
GetTickCount64
GetLastError
CloseHandle
Sleep

gdi32

CreateFontW
GetDeviceCaps
TextOutW
MoveToEx
SetTextColor
StretchDIBits
SetBkMode
SetBkColor
SelectObject
Rectangle
LineTo
DeleteObject
DeleteDC
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreatePen

Sections

.text
Size: 412KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 238KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6105c07c263e6f3acf5a63947bb6aaff

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

kernel32

gdi32

Sections

.text Size: 412KB - Virtual size: 412KB

.rdata Size: 238KB - Virtual size: 237KB

.data Size: 28KB - Virtual size: 33KB

.pdata Size: 5KB - Virtual size: 4KB

.rsrc Size: 199KB - Virtual size: 198KB

.reloc Size: 512B - Virtual size: 64B

.text
Size: 412KB - Virtual size: 412KB

.rdata
Size: 238KB - Virtual size: 237KB

.data
Size: 28KB - Virtual size: 33KB

.pdata
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 199KB - Virtual size: 198KB

.reloc
Size: 512B - Virtual size: 64B