fc0de09c81f7aa4165741257e0452d083d1b349aaff8a7795915aa703648e97f

Sharing

Copy URL Twitter E-mail

General

Target

fc0de09c81f7aa4165741257e0452d083d1b349aaff8a7795915aa703648e97f
Size

643KB
MD5

3f4e9994a19db3164f09b2333636dd22
SHA1

38d3600c3a7cdd4446ad844369b0747ac189ee55
SHA256

fc0de09c81f7aa4165741257e0452d083d1b349aaff8a7795915aa703648e97f
SHA512

cb16b1c902ae7f66ddff523f67dbea00799162b5c11362754821f7f2efcb25f61c0154d28a51ad87defe13831c2da30e6a3a2668e31e5a4d5ce277a8afeba120
SSDEEP

12288:AFQdV6NNat/6uUWaTPyHyB3iEspVmdJssLjC6dEn5bV:A8/96IaGSBr3pLjC6CnlV

Score

N/A

Malware Config

Signatures

Files

fc0de09c81f7aa4165741257e0452d083d1b349aaff8a7795915aa703648e97f
.exe windows x86

f0e9e29753dc011f25df26501185adbe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
ExitThread
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
FindClose
FindFirstFileA
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCommandLineA
GetConsoleScreenBufferInfo
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileType
GetFullPathNameA
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetVersion
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
CompareStringW
InterlockedDecrement
InterlockedIncrement
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
ReadConsoleInputA
ReadFile
ResetEvent
RtlUnwind
ScrollConsoleScreenBufferA
SetConsoleCtrlHandler
SetConsoleCursorPosition
SetConsoleMode
SetConsoleTextAttribute
SetEndOfFile
SetEnvironmentVariableA
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleOutputCharacterA
WriteFile
lstrcmpiA
lstrcpyA
GetModuleHandleW
Sleep
VirtualAllocEx
GetDriveTypeW
GetDriveTypeA
CompareStringA
InitializeCriticalSection
CloseHandle

user32

LoadIconW
LoadStringA
LoadIconA

advapi32

RegOpenKeyA
RegQueryValueExA

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 520KB - Virtual size: 520KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rwu0
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f0e9e29753dc011f25df26501185adbe

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 520KB - Virtual size: 520KB

.rwu0 Size: 11KB - Virtual size: 10KB

.rsrc Size: 92KB - Virtual size: 92KB

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 520KB - Virtual size: 520KB

.rwu0
Size: 11KB - Virtual size: 10KB

.rsrc
Size: 92KB - Virtual size: 92KB