63f7eb138d46111146012f75f8b4003f6b80e887c07ceb05600200ae5e6866b5

Sharing

Copy URL Twitter E-mail

General

Target

63f7eb138d46111146012f75f8b4003f6b80e887c07ceb05600200ae5e6866b5
Size

180KB
MD5

a08d05f3829692dd5578ea3fa6012211
SHA1

b85795445b04d8294bc343ee1fb487a1271ac7e2
SHA256

63f7eb138d46111146012f75f8b4003f6b80e887c07ceb05600200ae5e6866b5
SHA512

9264e602d22e27e019e24a3a92abd66740080352332506b3639d5fa8b3723eff08619715e8e9b374dc4e7d74086860c39ded365aded358be6271f9317b28f5c2
SSDEEP

1536:cI25pTpmZxi1m3Jfco55BDspHeNsbp6HTTiI1jImLBh1zrDo5no6+BRVp2HySiaM:Sy6pHeaeZ1jvLNXDoxovVMHySlhu

Score

N/A

Malware Config

Signatures

Files

63f7eb138d46111146012f75f8b4003f6b80e887c07ceb05600200ae5e6866b5
.exe windows x86

d12b56645a661fbda25653e8d3858913

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
DeleteFileA
SetFilePointer
GetFileSize
ReadFile
WideCharToMultiByte
InterlockedDecrement
LocalFree
EscapeCommFunction
PurgeComm
SetupComm
SetCommTimeouts
SetCommMask
SetCommState
GetCommState
Sleep
GetCommModemStatus
SetEvent
CreateEventA
CreateSemaphoreA
WaitForMultipleObjects
WaitForSingleObject
ReleaseSemaphore
GetSystemTime
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetTimeZoneInformation
GetLocalTime
ExitProcess
TerminateProcess
GetCurrentProcess
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
GetModuleFileNameA
GetCommandLineA
GetVersion
RtlUnwind
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
VirtualAlloc
IsBadWritePtr
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
InterlockedIncrement
WriteConsoleA
FindNextFileA
FindFirstFileA
FindClose
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
FlushFileBuffers
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEndOfFile
RaiseException

ole32

CoCreateInstance
CoInitializeEx
OleRun

oleaut32

VariantInit
VariantChangeType
SysFreeString
VariantClear
SysStringLen
GetErrorInfo

Sections

.text
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sqmkqet
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d12b56645a661fbda25653e8d3858913

Headers

File Characteristics

Imports

kernel32

ole32

oleaut32

Sections

.text Size: 88KB - Virtual size: 85KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 76KB - Virtual size: 76KB

sqmkqet Size: - Virtual size: 4KB

.text
Size: 88KB - Virtual size: 85KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 76KB - Virtual size: 76KB

sqmkqet
Size: - Virtual size: 4KB