9a4931d3681ee8920ddb03befbbac4a175d3b87e39041c3884f7526892613d05

Sharing

Copy URL Twitter E-mail

General

Target

9a4931d3681ee8920ddb03befbbac4a175d3b87e39041c3884f7526892613d05
Size

2.1MB
MD5

4a6750b369dae1cd3f690ba86b6e0168
SHA1

3002b42c83cd8bede713705e64b47e6c780d370c
SHA256

9a4931d3681ee8920ddb03befbbac4a175d3b87e39041c3884f7526892613d05
SHA512

2406a04633af054867964761311473f0c86d7835d8a1844bced48564cc520d767f20b21908e91997eb383373d68d345ce110c2023287f7ca07a37ccd14aff4f4
SSDEEP

49152:WvVoZbQjgTr+T7prHkI8UgG+BzMYtrGMLCUTwRP5v5E08+:wV0QjgTr+ZrHkIrgGWeH

Score

N/A

Malware Config

Signatures

Files

9a4931d3681ee8920ddb03befbbac4a175d3b87e39041c3884f7526892613d05
.exe windows x86

449303b782d37973092084c15d4ce5b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadPriority
GetCurrentThread
SetConsoleCtrlHandler
Sleep
WriteConsoleW
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterA
MultiByteToWideChar
GetStdHandle
GetSystemTimeAsFileTime
WaitForSingleObject
QueryPerformanceCounter
GetSystemInfo
CloseHandle
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
FlushConsoleInputBuffer
GetVersionExA
GlobalMemoryStatus
GetVersion
GetModuleHandleA
GetFileType
FormatMessageA
GetTickCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
VerifyVersionInfoA
SleepEx
VerSetConditionMask
LoadLibraryA
CreateSemaphoreA
WaitForMultipleObjects
GetProcAddress
FreeLibrary
GetSystemDirectoryA
SetThreadContext
GetThreadContext
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ResumeThread
GetThreadPriority
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
CreateEventA
ReleaseSemaphore
ResetEvent
SetEvent
SetLastError
GetLastError
DuplicateHandle
ExpandEnvironmentStringsA

ws2_32

__WSAFDIsSet
getpeername
connect
ntohs
getsockname
setsockopt
WSASetLastError
getsockopt
WSAStartup
ioctlsocket
freeaddrinfo
getaddrinfo
shutdown
WSACleanup
WSAIoctl
WSAGetLastError
select
socket
send
recv
listen
inet_ntoa
inet_addr
htons
htonl
closesocket
bind
accept

msvcr120

_isatty
exit
atof
atoi
strtoul
calloc
realloc
_strdup
_strnicmp
strncpy
strrchr
_time64
isalpha
toupper
sscanf
_difftime64
_gmtime64
rand
srand
_ftime64
_vscprintf
strtoll
isdigit
isspace
memchr
_stricmp
strtok
_localtime64
strncat_s
longjmp
_beginthreadex
_endthreadex
_ftime64_s
_setjmp3
fputc
tolower
fread
isxdigit
fgets
fseek
__sys_nerr
isalnum
_stat64
_stat64i32
strcmp
raise
_exit
wcsstr
feof
_wfopen
ferror
_setmode
ftell
isupper
signal
_getch
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_XcptFilter
_amsg_exit
__getmainargs
__set_app_type
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
__initenv
_fmode
_commode
?terminate@@YAXXZ
__crtSetUnhandledExceptionFilter
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_invoke_watson
_controlfp_s
_except_handler4_common
vfprintf
fputs
_fileno
fflush
strtol
strstr
strspn
_dclass
localeconv
strtod
memmove
_vacopy
malloc
free
memset
memcpy
strerror
_strtoi64
fgetc
_errno
qsort
sprintf
_snprintf
fwrite
fopen
fclose
_tzset
__timezone
__daylight
_vsnprintf
fprintf
__iob_func
strncmp
strchr
getenv
_getpid
_except1

user32

GetProcessWindowStation
MessageBoxA
GetDesktopWindow
GetUserObjectInformationW

advapi32

DeregisterEventSource
RegisterEventSourceA
ReportEventA

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 411KB - Virtual size: 411KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 318KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ctors
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dtors
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

449303b782d37973092084c15d4ce5b7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ws2_32

msvcr120

user32

advapi32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 411KB - Virtual size: 411KB

.data Size: 318KB - Virtual size: 331KB

.ctors Size: 512B - Virtual size: 4B

.dtors Size: 512B - Virtual size: 4B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 62KB - Virtual size: 62KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 411KB - Virtual size: 411KB

.data
Size: 318KB - Virtual size: 331KB

.ctors
Size: 512B - Virtual size: 4B

.dtors
Size: 512B - Virtual size: 4B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 62KB - Virtual size: 62KB