daae4a51b3ab3daaca6bdfc58cd167cd57720c8b3767cace92c878c1bebcf2f0

Sharing

Copy URL Twitter E-mail

General

Target

daae4a51b3ab3daaca6bdfc58cd167cd57720c8b3767cace92c878c1bebcf2f0
Size

253KB
MD5

8069b2ab409e20f25a7e2b409bae9f60
SHA1

d3d02ed9921ea0c288794f1bb42d016194c5f227
SHA256

daae4a51b3ab3daaca6bdfc58cd167cd57720c8b3767cace92c878c1bebcf2f0
SHA512

924a854c150563a89f89b3fc2816c09237c6de094e519efe1f14079cd63712e2783e675b83e6106cb6597ccd3183cbccc0ba51c93d1b7daa43f2992b521664a6
SSDEEP

3072:NZ/l/EZgxjBSBQlrIu5HS1f8WrIS/ny/EeBzxaimKbt1McJhuWrOV4hE3fFPD:NXKG8Sy1hrU/BzYCbMSuh4hu

Score

N/A

Malware Config

Signatures

Files

daae4a51b3ab3daaca6bdfc58cd167cd57720c8b3767cace92c878c1bebcf2f0
.exe windows x64

fd8908ac8524f3754d53a83833416369

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

kernel32

Sleep
MultiByteToWideChar
LocalAlloc
HeapSetInformation
WideCharToMultiByte
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
FormatMessageA
GetCurrentProcessId
SetThreadUILanguage
LocalFree
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId

msvcrt

_write
_setmode
memset
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
_cexit
_exit
_XcptFilter
__C_specific_handler
__getmainargs
exit
_vsnprintf
isprint
atoi
memmove
?terminate@@YAXXZ

ntdll

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlUpcaseUnicodeStringToOemString
RtlFreeAnsiString
NtClose
NtCreateFile
RtlGUIDFromString
RtlFreeUnicodeString
NtWaitForSingleObject
RtlIpv4AddressToStringA
RtlInitString
RtlInitUnicodeString
NtDeviceIoControlFile
RtlAnsiStringToUnicodeString
RtlUnicodeStringToAnsiString

user32

CharToOemBuffA
OemToCharBuffA

wsock32

ioctlsocket
ntohl
ord1108

iphlpapi

NhGetInterfaceNameFromDeviceGuid

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 236KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd8908ac8524f3754d53a83833416369

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

ntdll

user32

wsock32

iphlpapi

Sections

.text Size: 12KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 44KB

.pdata Size: 512B - Virtual size: 372B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 236KB - Virtual size: 460KB

.text
Size: 12KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 44KB

.pdata
Size: 512B - Virtual size: 372B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 236KB - Virtual size: 460KB