b67554cfab36c45d95405e967a4425cbc8fa7c66588b128ab1702617e71f17bd

Sharing

Copy URL Twitter E-mail

General

Target

b67554cfab36c45d95405e967a4425cbc8fa7c66588b128ab1702617e71f17bd
Size

307KB
MD5

49541a07245a4c03d18190af86246dd0
SHA1

cb7bdf0d5cad2f191b348cf4aa6b9276944fc6c8
SHA256

b67554cfab36c45d95405e967a4425cbc8fa7c66588b128ab1702617e71f17bd
SHA512

1639c0c3f524002e25bcbf947a3323f7e15e5e0edd73043b0c46cb9be7647e4270c538ddff758abd5106faaf928f849afb7c1950832f8a6d4c8472e88c5def1e
SSDEEP

6144:0M796nW0Or6tjIXeDVGtSFLQf/ZKRm2QECSgksy+gCgay1G3I/w:0M7ma6t8DSGpK+SgkskCga

Score

N/A

Malware Config

Signatures

Files

b67554cfab36c45d95405e967a4425cbc8fa7c66588b128ab1702617e71f17bd
.exe windows x86

dde342a552c0da960b78cfaf7028278a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceW
FindResourceExW
MultiByteToWideChar
GetVolumeInformationW
GetWindowsDirectoryW
LoadLibraryExA
LoadLibraryW
LoadResource
LoadLibraryExW
LoadLibraryA
GetLastError
WideCharToMultiByte
WaitForSingleObject
Sleep
DeleteFileW
LockResource
GetProcAddress
SizeofResource
CloseHandle
CreateFileW
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapAlloc
HeapFree
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringW
GetStringTypeW
HeapReAlloc
SetStdHandle
WriteConsoleW
FlushFileBuffers
GetProcessHeap

advapi32

CloseServiceHandle
OpenSCManagerW

wininet

InternetReadFile
InternetConnectW

winhttp

WinHttpCrackUrl

Sections

.text
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dde342a552c0da960b78cfaf7028278a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

wininet

winhttp

Sections

.text Size: 230KB - Virtual size: 229KB

.rdata Size: 50KB - Virtual size: 50KB

.data Size: 7KB - Virtual size: 14KB

.reloc Size: 18KB - Virtual size: 18KB

.text
Size: 230KB - Virtual size: 229KB

.rdata
Size: 50KB - Virtual size: 50KB

.data
Size: 7KB - Virtual size: 14KB

.reloc
Size: 18KB - Virtual size: 18KB