9138730eb2c68c9827153ef7581af2a28b87ee2f8a5f00a728312bf83d341324

Sharing

Copy URL Twitter E-mail

General

Target

9138730eb2c68c9827153ef7581af2a28b87ee2f8a5f00a728312bf83d341324
Size

101KB
MD5

4057a07a6464b9551b77f483f1cf8a70
SHA1

5c6dad51b25ecf9f9020899d4dcbfe317341b5c6
SHA256

9138730eb2c68c9827153ef7581af2a28b87ee2f8a5f00a728312bf83d341324
SHA512

adf0f22219be6034f0fd9a4a5dae6acc18e0b3d2528191290e7ea0e1fad1083132bca36cae8d21fe2c253d7f599c0c54d8a7d277920240dd19e84a082359a5c0
SSDEEP

1536:DBB1ebFtyM1iwOf/eM95yAf+ZS06AFDW08pf3087prTFkxFnyPLZpnmuxGojCWh5:VeBt0wO++59WXFa0Ix7IqdnVuWh9o4

Score

N/A

Malware Config

Signatures

Files

9138730eb2c68c9827153ef7581af2a28b87ee2f8a5f00a728312bf83d341324
.exe windows x86

bf6c0901d6d5939708b45df16e88c081

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
TraceMessage

kernel32

TerminateProcess
GetCurrentProcess
CloseHandle
WaitForMultipleObjectsEx
CreateProcessW
GetCurrentProcessId
GetCurrentThread
DuplicateHandle
CreateEventW
ReleaseSemaphore
IsDebuggerPresent
WaitForSingleObject
GetCurrentThreadId
AddVectoredExceptionHandler
SetHandleInformation
GetLastError
CreateSemaphoreW
FreeLibrary
GetProcAddress
LoadLibraryW
SetErrorMode
SetProcessShutdownParameters
SetConsoleCtrlHandler
GetModuleHandleExW
HeapSetInformation
GetTempPathW
InterlockedCompareExchange
MoveFileW
CreateFileW
DeleteFileW
OpenProcess
CreateFileMappingW
MapViewOfFile
VirtualLock
VirtualUnlock
UnmapViewOfFile
lstrlenW
GetProcessHeap
HeapFree
CreateToolhelp32Snapshot
Thread32First
GetProcessId
OpenThread
SuspendThread
Thread32Next
InterlockedDecrement
WriteFile
InterlockedIncrement
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
InterlockedExchange
GetTempFileNameW
HeapAlloc

msvcr80

_wtoi64
??3@YAXPAX@Z
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_callnewh
malloc
_set_abort_behavior
wcsstr
memset
_vsnwprintf_s
?terminate@@YAXXZ
memcpy

ole32

CoInitializeSecurity
CoUninitialize
CoInitializeEx

shlwapi

StrStrIW
PathFindExtensionW
PathFindFileNameW

oleaut32

SetOaNoCache

faultrep

ReportFault

psapi

GetModuleFileNameExW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.mdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bf6c0901d6d5939708b45df16e88c081

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcr80

ole32

shlwapi

oleaut32

faultrep

psapi

version

Sections

.text Size: 15KB - Virtual size: 15KB

.data Size: 512B - Virtual size: 916B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 912B

.mdata Size: 76KB - Virtual size: 76KB

.text
Size: 15KB - Virtual size: 15KB

.data
Size: 512B - Virtual size: 916B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 912B

.mdata
Size: 76KB - Virtual size: 76KB