6ab1e3b5ce509aea6849c8bcec66821b4bd5c481236e2f0b12b95989f7fa4655

Sharing

Copy URL

Twitter E-mail

General

Target

6ab1e3b5ce509aea6849c8bcec66821b4bd5c481236e2f0b12b95989f7fa4655
Size

166KB
MD5

0ffce146d28d6b691490c83205a9ae50
SHA1

e75075391fcc666d7ec64a3752df474a5308cade
SHA256

6ab1e3b5ce509aea6849c8bcec66821b4bd5c481236e2f0b12b95989f7fa4655
SHA512

9f925dfcc2f8feaabe2ce0a1d536a4d04e765a9c9da3cca79c8252dfe0f57b646a1461e4fc9c624b1826897efb136ce3b7e7dd2452ba0b6188456fbeb3f7cff7
SSDEEP

3072:AQZ2HjtRWsfssW+qKgRCogXMyYAhcuEDeiLS87pAAL/oOL:m7fs2UCoIcrDJScLQW

Score

N/A

Malware Config

Signatures

Files

6ab1e3b5ce509aea6849c8bcec66821b4bd5c481236e2f0b12b95989f7fa4655
.exe windows x86

7adcb0cd693b3968b82d5df7c57aabf3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptBinaryToStringA

ole32

CoInitialize
CoUninitialize

user32

LoadAcceleratorsA
LoadCursorA
LoadIconA
RegisterClassW

kernel32

GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
VirtualProtect

ulib

??0ARGUMENT_LEXEMIZER@@QAE@XZ
??0ARRAY@@QAE@XZ
??0CLASS_DESCRIPTOR@@QAE@XZ
??0DSTRING@@QAE@XZ
??0FLAG_ARGUMENT@@QAE@XZ
??0PATH@@QAE@XZ
??0PATH_ARGUMENT@@QAE@XZ
??0PROGRAM@@IAE@XZ
??0STRING_ARGUMENT@@QAE@XZ
??1PATH_ARGUMENT@@UAE@XZ
??1PROGRAM@@UAE@XZ
?Compare@OBJECT@@UBEJPBV1@@Z
?DisplayMessage@PROGRAM@@UBAEKW4MESSAGE_TYPE@@PADZZ
?DisplayMessage@PROGRAM@@UBEEKW4MESSAGE_TYPE@@@Z
?Fatal@PROGRAM@@UBAXKKPADZZ
?Fatal@PROGRAM@@UBEXXZ
?GetStandardError@PROGRAM@@UAEPAVSTREAM@@XZ
?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ
?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?Initialize@ARRAY@@QAEEKK@Z
?Initialize@CLASS_DESCRIPTOR@@QAEEXZ
?PutSwitches@ARGUMENT_LEXEMIZER@@QAEXPBD@Z
?QueryDirectory@SYSTEM@@SGPAVFSN_DIRECTORY@@PBVPATH@@E@Z
?Usage@PROGRAM@@UBEXXZ
?ValidateVersion@PROGRAM@@UBEXKK@Z
?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z

ntdll

RtlFreeHeap
RtlAllocateHeap

Sections

AUTO
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DGROUP
Size: 126KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc2
Size: 124B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc3
Size: 488B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7adcb0cd693b3968b82d5df7c57aabf3

Headers

File Characteristics

Imports

crypt32

ole32

user32

kernel32

ulib

ntdll

Sections

AUTO Size: 35KB - Virtual size: 35KB

DGROUP Size: 126KB - Virtual size: 364KB

.idata Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 194B

.rsrc Size: 512B - Virtual size:

.reloc2 Size: 124B - Virtual size: 124B

.reloc3 Size: 488B - Virtual size: 488B

AUTO
Size: 35KB - Virtual size: 35KB

DGROUP
Size: 126KB - Virtual size: 364KB

.idata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 194B

.rsrc
Size: 512B - Virtual size:

.reloc2
Size: 124B - Virtual size: 124B

.reloc3
Size: 488B - Virtual size: 488B