fe3034522915a562fb76a0553736f7a591dbbe8145952ebf70f3100ff188ae23

Sharing

Copy URL Twitter E-mail

General

Target

fe3034522915a562fb76a0553736f7a591dbbe8145952ebf70f3100ff188ae23
Size

269KB
MD5

4b4b4921033246eee8320b4cd812c9ea
SHA1

543761c0363c34bd7e478ff0cfeaf8db9970ada9
SHA256

fe3034522915a562fb76a0553736f7a591dbbe8145952ebf70f3100ff188ae23
SHA512

df0c65ecf34730b5d9d928fe6f8bcca4111aeefe402cff490b2850b0a599c9e260be8783c7798fa40b4c4fdb362d497b8803de1a6c36018ed4d4f913f519881d
SSDEEP

6144:/RWVWxMB5HdId/ZeccJXqY2/aXB9p/Dh3rlH8EIJ:/Y5HdIdQlRaCXB9p7brIJ

Score

N/A

Malware Config

Signatures

Files

fe3034522915a562fb76a0553736f7a591dbbe8145952ebf70f3100ff188ae23
.exe windows x86

a4076ee7653a718d32cb0143d3fb3912

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

usp10

ScriptApplyLogicalWidth
ScriptCPtoX
ScriptCacheGetHeight
ScriptFreeCache
ScriptGetCMap
ScriptGetFontProperties
ScriptGetGlyphABCWidth
ScriptGetLogicalWidths
ScriptGetProperties
ScriptIsComplex
ScriptLayout
ScriptPlace
ScriptRecordDigitSubstitution
ScriptShape
ScriptStringAnalyse
ScriptStringCPtoX
ScriptStringValidate
ScriptStringXtoCP
ScriptString_pLogAttr

kernel32

TlsGetValue
HeapReAlloc
HeapAlloc
HeapSize
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
MultiByteToWideChar
LCMapStringW
RtlUnwind
Sleep
HeapFree
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
EnterCriticalSection
IsProcessorFeaturePresent
VirtualProtect
ExpandEnvironmentStringsA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
FatalAppExitA

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4076ee7653a718d32cb0143d3fb3912

Headers

DLL Characteristics

File Characteristics

Imports

usp10

kernel32

Sections

.text Size: 89KB - Virtual size: 88KB

.rdata Size: 110KB - Virtual size: 110KB

.data Size: 65KB - Virtual size: 118KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 89KB - Virtual size: 88KB

.rdata
Size: 110KB - Virtual size: 110KB

.data
Size: 65KB - Virtual size: 118KB

.reloc
Size: 3KB - Virtual size: 3KB