fd2d6ec1d3e60c893048a43d7bd018a986db68b9ad89d027b3637b453d66105e

Sharing

Copy URL Twitter E-mail

General

Target

fd2d6ec1d3e60c893048a43d7bd018a986db68b9ad89d027b3637b453d66105e
Size

605KB
MD5

573abbe135ed6d0c3754e2828b6dbcf0
SHA1

a88d958370044954541198822ae9758cc5235fa9
SHA256

fd2d6ec1d3e60c893048a43d7bd018a986db68b9ad89d027b3637b453d66105e
SHA512

f183f537ff99b07a129368704a75cb35a3417a2eea1f1654b53551dd6afd69068c33f15523ec4ad757614b9981e1ef49db73ca3e7a9680da96a4f5932c5fe634
SSDEEP

12288:mxOXQGqMFk73HlfMiK7df5Zpg0GTH7FFuh0JTL2AOrwercuHogL7sF5v2R:fDkLqZp4xFuOJTLIH/HosAX

Score

N/A

Malware Config

Signatures

Files

fd2d6ec1d3e60c893048a43d7bd018a986db68b9ad89d027b3637b453d66105e
.exe windows x64

cf7d07b6513857a567f24a1298aa75d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetTimeZoneInformation
ExpandEnvironmentStringsW
HeapFree
GetProcessHeap
HeapAlloc
CreateProcessW
lstrlenW
VerifyVersionInfoW
VerSetConditionMask
OutputDebugStringW
CompareStringW
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
SystemTimeToTzSpecificLocalTime
FlushFileBuffers
WriteFile
SetFilePointer
WideCharToMultiByte
GetSystemTime
GetModuleFileNameW
SetLastError
GetLastError
ReleaseMutex
WaitForSingleObject
CloseHandle
CreateMutexW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
GetStartupInfoW
OpenEventW
GetFileAttributesW
CreateDirectoryW
CreateFileW
GetSystemDirectoryW
LoadLibraryExW
GetVolumePathNameW
GetDriveTypeW
GetFileType
Sleep
GetCommandLineW
LoadLibraryW
FreeLibrary
GetProcAddress
GetFileSize

msvcrt

free
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
memmove
memcpy
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_cexit
_exit
_XcptFilter
__C_specific_handler
__wgetmainargs
_vsnwprintf
malloc
memset

ntdll

RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry

ole32

CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize
CoInitializeEx

advapi32

AllocateAndInitializeSid
CopySid
IsValidSid
FreeSid
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegEnumValueW
RegDeleteValueW
GetUserNameW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetLengthSid
RegCloseKey
RegOpenKeyExW
CheckTokenMembership

user32

IsWindow
PostMessageW

oleaut32

VariantInit
VariantClear

shlwapi

ord176
PathIsRootW
PathIsRelativeW
PathStripToRootW
StrChrW
StrRChrW
PathIsUNCW

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 556KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cf7d07b6513857a567f24a1298aa75d7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

ntdll

ole32

advapi32

user32

oleaut32

shlwapi

Sections

.text Size: 43KB - Virtual size: 42KB

.data Size: 1KB - Virtual size: 4KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 556KB - Virtual size: 2.4MB

.text
Size: 43KB - Virtual size: 42KB

.data
Size: 1KB - Virtual size: 4KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 556KB - Virtual size: 2.4MB