51354b5671c0401448802c0df8478c37a6e8b6084d5df7eeb965fbbbb3829904

Sharing

Copy URL Twitter E-mail

General

Target

51354b5671c0401448802c0df8478c37a6e8b6084d5df7eeb965fbbbb3829904
Size

245KB
MD5

0ad76fa0d268d1769b650683254e4210
SHA1

b1a55fc2e4b8008b2a551d53b460baa9dbecabc0
SHA256

51354b5671c0401448802c0df8478c37a6e8b6084d5df7eeb965fbbbb3829904
SHA512

d3196811df41a076b1f3f4f32500092e50f942fc5d6d05fe9cfadaa3489c8e1aee94ffa2ea82c7c2fe98b3209f3c37fdde545cdc552bfba44c6a684d89ee4b78
SSDEEP

3072:lIstD7trOt9pfslMYO9mXn9H0LeinObM6gZy5ChoTifkW6xjmD4:Kw1rOt9pdYamXnrdbMKwwWMjmD

Score

N/A

Malware Config

Signatures

Files

51354b5671c0401448802c0df8478c37a6e8b6084d5df7eeb965fbbbb3829904
.exe windows x86

e911ab310a654e9f3a6a4b6ab5edf932

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetTraceEnableFlags
GetTraceLoggerHandle
TraceEvent
UnregisterTraceGuids
GetTraceEnableLevel
RegisterTraceGuidsW

kernel32

WaitForSingleObject
GetModuleHandleW
LoadLibraryW
GetProcAddress
HeapSetInformation
GetCurrentProcess
GetVersionExA
FreeLibrary
CloseHandle
SetProcessShutdownParameters
GetProcessHeap
CreateEventW
InterlockedExchange
CreateThread
VirtualAlloc
GetModuleFileNameW
DeactivateActCtx
ActivateActCtx
ReleaseActCtx
CreateActCtxW
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetEvent
HeapFree
HeapAlloc
GetCurrentProcessId
GetLastError
InterlockedDecrement
InterlockedIncrement
RegisterApplicationRestart
Sleep
InterlockedCompareExchange
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleA

user32

MsgWaitForMultipleObjects
DispatchMessageW
DefWindowProcW
PostQuitMessage
TranslateMessage
PeekMessageW
GetThreadDesktop
GetUserObjectInformationW
CreateWindowExW
LoadCursorW
RegisterClassW

msvcrt

rand_s
_wcsicmp
memset
_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
wcstok
_wcsnicmp

ole32

CoInitializeEx
CoUninitialize
CoRegisterClassObject
CoRevokeClassObject
CoInitializeSecurity

wininet

InternetGetCookieExW
InternetSetCookieExW

iertutil

ord650
ord35

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e911ab310a654e9f3a6a4b6ab5edf932

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

msvcrt

ole32

wininet

iertutil

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 203KB - Virtual size: 203KB

.reloc Size: 30KB - Virtual size: 31KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 203KB - Virtual size: 203KB

.reloc
Size: 30KB - Virtual size: 31KB