98d1aaf3f188d332a97dbe638a13fbed8eb194f27fd435f6a7c6420a6cf7fcb6

Sharing

Copy URL Twitter E-mail

General

Target

98d1aaf3f188d332a97dbe638a13fbed8eb194f27fd435f6a7c6420a6cf7fcb6
Size

84KB
MD5

84907df61b3c45fabb67e9689dfb4bb0
SHA1

16a22c0984288d3dc4901ff6616a7b0a3c0ad41a
SHA256

98d1aaf3f188d332a97dbe638a13fbed8eb194f27fd435f6a7c6420a6cf7fcb6
SHA512

b3021d6751686803f3b76e36955836c46b580e6307d20c9d8df443a110f2c11bfb325c7c8d7252fa53000b6db9989b9e722c18de9e517ae044f1bcd7893179b1
SSDEEP

768:RlTfTFgDo8ZU9QZU93IWv4CFzZlOl2bGBePNYQqt2Njy:7xIo8zUIWwgw2bGBeqF2

Score

N/A

Malware Config

Signatures

Files

98d1aaf3f188d332a97dbe638a13fbed8eb194f27fd435f6a7c6420a6cf7fcb6
.exe windows x64

07e63789c19cb4c7378411447f620eac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CreateFileW
CloseHandle
GetCommandLineW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
UnhandledExceptionFilter
GetLastError
LocalFree
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

user32

IsWindow

msvcrt

?terminate@@YAXXZ
__set_app_type
_commode
__setusermatherr
_amsg_exit
_wcmdln
exit
_cexit
_exit
_XcptFilter
__C_specific_handler
__wgetmainargs
swscanf_s
_fmode
_initterm
memset

ole32

CoInitializeEx
CoUninitialize

shell32

CommandLineToArgvW

wintrust

WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
WinVerifyTrust
WTHelperProvDataFromStateData

crypt32

CertOpenStore
CertControlStore
CertFindCertificateInStore
CertFreeCertificateContext
CertCloseStore
CertGetCertificateContextProperty

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

07e63789c19cb4c7378411447f620eac

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcrt

ole32

shell32

wintrust

crypt32

Sections

.text Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 228B

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 27KB - Virtual size: 28KB

.text
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 228B

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 27KB - Virtual size: 28KB