348f226515f29d980c9440d4fec442e73787c347f9a3f076cfa7609d4e9900eb

Sharing

Copy URL Twitter E-mail

General

Target

348f226515f29d980c9440d4fec442e73787c347f9a3f076cfa7609d4e9900eb
Size

436KB
MD5

406f26e116e3c5b87d1443bad1d75c80
SHA1

10dee4e50fd478bf875f7abb7097cc95e5024447
SHA256

348f226515f29d980c9440d4fec442e73787c347f9a3f076cfa7609d4e9900eb
SHA512

cf059c917d3bcd033c31a0a820ec5e93831750ea86d09ebb457ce81c34e74fa1a649ae5eca062d8c715ad468275b5e82b677a2fdbe277a88b1345d7231f65c81
SSDEEP

12288:vRket4dMlrZHYFKB060Y+UlaRe5qO73a1v:5yK4FKB07YRlaRHO8

Score

N/A

Malware Config

Signatures

Files

348f226515f29d980c9440d4fec442e73787c347f9a3f076cfa7609d4e9900eb
.dll windows x86

34f49ceff3adda8f9eb1b88b21bc85ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
GetStdHandle
SetConsoleCursorPosition
GetConsoleScreenBufferInfo
SetPriorityClass
OpenProcess
GetCurrentProcessId
FindClose
FindFirstFileA
RtlUnwind
RaiseException
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetSystemTimeAsFileTime
HeapFree
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
GetModuleFileNameA
HeapReAlloc
GetLastError
CloseHandle
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
SetFilePointer
ReadFile
InitializeCriticalSection
GetProcAddress
GetModuleHandleA
WriteFile
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetUnhandledExceptionFilter
HeapSize
WideCharToMultiByte
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
FlushFileBuffers
SetStdHandle
Sleep
MultiByteToWideChar
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LoadLibraryA
CreateFileA
IsBadReadPtr
IsBadCodePtr
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetStringTypeA
GetStringTypeW
SetEndOfFile
GetTimeZoneInformation
InterlockedExchange
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetDriveTypeA
GetFullPathNameA
GetCurrentDirectoryA

Exports

Exports

Close
Decode
Encode
GetDecodePercent
GetLValue
GetPercent
GetTotalTime
Open
Split

Sections

.text
Size: 260KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

34f49ceff3adda8f9eb1b88b21bc85ef

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 260KB - Virtual size: 256KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 48KB - Virtual size: 254KB

.reloc Size: 20KB - Virtual size: 19KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 260KB - Virtual size: 256KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 48KB - Virtual size: 254KB

.reloc
Size: 20KB - Virtual size: 19KB

.rmnet
Size: 60KB - Virtual size: 60KB