c29669cfe66efa2c96fb64c8ebc112e20fce457a1b2045652998e75e573962c6

Sharing

Copy URL Twitter E-mail

General

Target

c29669cfe66efa2c96fb64c8ebc112e20fce457a1b2045652998e75e573962c6
Size

958KB
MD5

543f56f3bb7bd2583ae6aa6d20291cb5
SHA1

4fb2175446a02fd2cbc383c9be717f26e65a25b1
SHA256

c29669cfe66efa2c96fb64c8ebc112e20fce457a1b2045652998e75e573962c6
SHA512

2347a6e41498c755d5a364fcf71c24e6d4c3aecbc892cdafe0c0cd74dcac3c7b8d8cd1cb48c25b7bfb0b89bc03f4cd1f0bdedeca89e92516cc0185d1656bca05
SSDEEP

12288:BcF7rGNrkty0fkhAlmvqRVB7rGNrkty0fkhAlmvb2K:BcFErmyFAeqRErmyFAeKK

Score

N/A

Malware Config

Signatures

Files

c29669cfe66efa2c96fb64c8ebc112e20fce457a1b2045652998e75e573962c6
.exe windows x86

aff4162dfcf30cfe15d59ec89614841f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

xul

XRE_CreateAppData
XRE_GetFileFromPath
XRE_GetBinaryPath
XRE_main
XRE_FreeAppData

xpcom

NS_StringGetData
NS_LogInit
NS_CStringToUTF16
NS_CStringContainerFinish
NS_StringContainerInit
NS_StringContainerFinish
NS_CStringContainerInit2
NS_LogTerm

nspr4

PR_GetEnv
PR_smprintf_free
PR_smprintf
PR_SetEnv

plc4

PL_strcasecmp

kernel32

IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
GetProcAddress
LoadLibraryExA
SearchPathW
GetCurrentProcess
VirtualAllocEx
VirtualProtectEx

user32

MessageBoxW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

mozcrt19

_lock
__dllonexit
_unlock
?terminate@@YAXXZ
_onexit
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__winitenv
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
__set_app_type
_fdopen
??_U@YAPAXI@Z
wcslen
free
memcpy
wcsrchr
??_V@YAXPAX@Z
malloc
strcmp
_vsnwprintf
vfprintf
_dup
fclose

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 870KB - Virtual size: 870KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

aff4162dfcf30cfe15d59ec89614841f

Headers

DLL Characteristics

File Characteristics

Imports

xul

xpcom

nspr4

plc4

kernel32

user32

version

mozcrt19

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 870KB - Virtual size: 870KB

.reloc Size: 71KB - Virtual size: 72KB

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 870KB - Virtual size: 870KB

.reloc
Size: 71KB - Virtual size: 72KB