ce9d1f7cbe55182e76618cedd2a9bba9b8aada3a07d11fb93259a79f83d72010

Sharing

Copy URL Twitter E-mail

General

Target

ce9d1f7cbe55182e76618cedd2a9bba9b8aada3a07d11fb93259a79f83d72010
Size

58KB
MD5

499b9ab60ef0d43e3ecacba664f547a0
SHA1

3877ce495a1cd0bfa12ab7baf34c9d2fb253d347
SHA256

ce9d1f7cbe55182e76618cedd2a9bba9b8aada3a07d11fb93259a79f83d72010
SHA512

d3cf417f1b38f479f4206663adb20ef29cb09c1aa01998c132b7ba6e9a17508fd81a57242e503b6f101072e7088c7b00615634d433ec41e747391bd47c6a47c0
SSDEEP

1536:RHREmqRhH9DwQYKUTLKPEZhUyojro1Ko/adk5zCEZK:xTAH9DwHHnKPELm01VCm5zg

Score

N/A

Malware Config

Signatures

Files

ce9d1f7cbe55182e76618cedd2a9bba9b8aada3a07d11fb93259a79f83d72010
.exe windows x86

d546c5774e08d4bda597e81d2636df47

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_vsnwprintf
??1type_info@@UAE@XZ
?terminate@@YAXXZ
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
_wcsicmp
??3@YAXPAX@Z
??2@YAPAXI@Z
iswdigit
_onexit
wcslen

advapi32

RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
TraceEvent
UnregisterTraceGuids

kernel32

GetProcessHeap
HeapCreate
GetSystemInfo
InterlockedExchange
SetThreadUILanguage
RaiseException
InterlockedIncrement
HeapAlloc
InterlockedDecrement
HeapFree
GetCurrentProcessId
LocalFree
LocalAlloc
FreeLibrary
GetProcAddress
LoadLibraryW
SetErrorMode
GetLastError
GetModuleHandleW
GetExitCodeProcess
WaitForSingleObject
FormatMessageW
WriteFile
WideCharToMultiByte
GetConsoleOutputCP
WriteConsoleW
GetFileType
GetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter

shell32

ShellExecuteExW
SHGetFolderPathW

mscoree

GetRealProcAddress
LoadLibraryShim
CorBindToRuntimeEx

user32

LoadStringW

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lzoiupd
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d546c5774e08d4bda597e81d2636df47

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

shell32

mscoree

user32

Sections

.text Size: 28KB - Virtual size: 28KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 29KB - Virtual size: 30KB

lzoiupd Size: - Virtual size: 4KB

.text
Size: 28KB - Virtual size: 28KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 29KB - Virtual size: 30KB

lzoiupd
Size: - Virtual size: 4KB