68780f33a9a1033abe1852dc1d5027492329f0c35435ed4e5a47c1b11e4f763f

Sharing

Copy URL Twitter E-mail

General

Target

68780f33a9a1033abe1852dc1d5027492329f0c35435ed4e5a47c1b11e4f763f
Size

613KB
MD5

0b6aff31946a574fa06181dcd5bfaa00
SHA1

ffca9aef45385ca92751c0726ebb4f9098a2d914
SHA256

68780f33a9a1033abe1852dc1d5027492329f0c35435ed4e5a47c1b11e4f763f
SHA512

dc645925dd006bda2e7e7359fef0a6f6e5be9d350365f118199847f0b312ca66ed81412477c767a273ab53f5aefe13bddf7fef814380346ef59ed6e34fadc44b
SSDEEP

12288:TE/k3knErLaez4Zc//AuNN/qEUc+A47d+oig2QRV:Tj3knW206IIqNCnD3

Score

N/A

Malware Config

Signatures

Files

68780f33a9a1033abe1852dc1d5027492329f0c35435ed4e5a47c1b11e4f763f
.exe windows x64

07e63789c19cb4c7378411447f620eac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CreateFileW
CloseHandle
GetCommandLineW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
UnhandledExceptionFilter
GetLastError
LocalFree
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

user32

IsWindow

msvcrt

?terminate@@YAXXZ
__set_app_type
_commode
__setusermatherr
_amsg_exit
_wcmdln
exit
_cexit
_exit
_XcptFilter
__C_specific_handler
__wgetmainargs
swscanf_s
_fmode
_initterm
memset

ole32

CoInitializeEx
CoUninitialize

shell32

CommandLineToArgvW

wintrust

WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
WinVerifyTrust
WTHelperProvDataFromStateData

crypt32

CertOpenStore
CertControlStore
CertFindCertificateInStore
CertFreeCertificateContext
CertCloseStore
CertGetCertificateContextProperty

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 556KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

07e63789c19cb4c7378411447f620eac

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcrt

ole32

shell32

wintrust

crypt32

Sections

.text Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 228B

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 556KB - Virtual size: 1.9MB

.text
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 228B

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 556KB - Virtual size: 1.9MB