226448cfcf60eab14709b3aae18157719447e1412893dcf874814cd69aedced4

Sharing

Copy URL Twitter E-mail

General

Target

226448cfcf60eab14709b3aae18157719447e1412893dcf874814cd69aedced4
Size

313KB
MD5

a26c6044c32c90275caa7db2f18fbca0
SHA1

edc0bd17a6f60e95eda7163bdf95fad7cf29b9a2
SHA256

226448cfcf60eab14709b3aae18157719447e1412893dcf874814cd69aedced4
SHA512

35b354522d20cfa0547c20f5f8f3702d93c7932c91a8a0d0b94e946825c2d5c4311fe1a046a8e75f2ccbbf03aef12e66b5a3157438278389ad62bff6e93e139c
SSDEEP

6144:7G+iUR0pUbJsJnp+MiwrWlcVwBtUhu2ggwHWk:yoDNsJnpKwrCcVwBdV2k

Score

N/A

Malware Config

Signatures

Files

226448cfcf60eab14709b3aae18157719447e1412893dcf874814cd69aedced4
.exe windows x86

861674901163db7d7c5e53a911ff92be

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GetCurrentProcess
SetEndOfFile
GetModuleHandleExW
WaitForSingleObject
GetModuleHandleW
WriteFile
InitializeCriticalSection
LoadLibraryW
FreeConsole
LeaveCriticalSection
ReadFile
GetCommandLineA
CreateFileW
GetStdHandle
GetLastError
SetLastError
GetProcAddress
EnterCriticalSection
DeleteCriticalSection
GetCurrentProcessId
GetVolumeInformationW
GetTempPathA
SetEnvironmentVariableA
ReadConsoleW
ExitProcess
VirtualProtect
Sleep
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
LoadLibraryA
GetProcessHeap
HeapFree
HeapAlloc
FreeLibrary
CloseHandle
GetModuleFileNameA
GetModuleFileNameW
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
RaiseException
RtlUnwind
GetCPInfo
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CompareStringW
LCMapStringW
AreFileApisANSI
HeapSize
GetCurrentThreadId
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetFileType
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryExW
OutputDebugStringW
SetFilePointerEx
SetStdHandle
WriteConsoleW
VirtualQuery

user32

MessageBoxW

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

861674901163db7d7c5e53a911ff92be

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 146KB - Virtual size: 146KB

.rdata Size: 42KB - Virtual size: 41KB

.data Size: 17KB - Virtual size: 27KB

.rsrc Size: 68KB - Virtual size: 68KB

.reloc Size: 37KB - Virtual size: 37KB

.text
Size: 146KB - Virtual size: 146KB

.rdata
Size: 42KB - Virtual size: 41KB

.data
Size: 17KB - Virtual size: 27KB

.rsrc
Size: 68KB - Virtual size: 68KB

.reloc
Size: 37KB - Virtual size: 37KB