b3334b383d62c2483d3e9f94b6b647568cab42a17df64e474238155e6c794830

Sharing

Copy URL Twitter E-mail

General

Target

b3334b383d62c2483d3e9f94b6b647568cab42a17df64e474238155e6c794830
Size

135KB
MD5

903e728349db78e1626645c2afe393eb
SHA1

a6fd34d2c46621da47cc8fae548cd9366d39e978
SHA256

b3334b383d62c2483d3e9f94b6b647568cab42a17df64e474238155e6c794830
SHA512

bab09916efe654699175590c70eceb9b61ac5785170824a091a90641af5cf6da36774f6d5174b9eb96da803c310b6cdf2557336f38fe60b52ea55862866e0bda
SSDEEP

1536:8BErEQg0LYPEYNYfXEe/VfMkwPnST44c58Y58pu/aXxV0hkzIdeXisKldFxisKl7:8uzlLYPEYNYfXE8pw758Ympu7Cq5WV

Score

N/A

Malware Config

Signatures

Files

b3334b383d62c2483d3e9f94b6b647568cab42a17df64e474238155e6c794830
.exe windows x64

0fd953699767d2cd9c8aa5de7808d7d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetCommandLineW
GlobalFree
GetModuleFileNameW
Sleep
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RtlUnwindEx
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FlsGetValue
FlsSetValue
TlsFree
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapSize
GetLocaleInfoA
WideCharToMultiByte
HeapReAlloc
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

advapi32

StartServiceW
OpenServiceW
DeleteService
OpenSCManagerW
CreateServiceW
CloseServiceHandle
ControlService

shell32

CommandLineToArgvW

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��syq
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0fd953699767d2cd9c8aa5de7808d7d5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shell32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 8KB

.pdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 72KB - Virtual size: 72KB

����syq Size: - Virtual size: 4KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 8KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 72KB - Virtual size: 72KB

��syq
Size: - Virtual size: 4KB