4b6b210024acd2ff46e6320e6543f56fd6f10fed36e55b38a2d23c588f501eec

Sharing

Copy URL Twitter E-mail

General

Target

4b6b210024acd2ff46e6320e6543f56fd6f10fed36e55b38a2d23c588f501eec
Size

602KB
MD5

8365873c797bb8d0d7d24fee2d21b4b0
SHA1

fac7da3c21ff9e5fd289ab2a89bb96cac4ab679c
SHA256

4b6b210024acd2ff46e6320e6543f56fd6f10fed36e55b38a2d23c588f501eec
SHA512

7efbfe24ca66ba18819ff99319d88ec4e83a09c49fe55a782f7a4f14ac5cc721a1e60acbe71946897e22282a16cb5c9f677319518a0097018528ec384410fb09
SSDEEP

12288:t3CPq0UoLipMKS56NqKMagtdV0HmC088vbSkYna/B:ZCPqKvKS5idxgLV07F8TSZna/

Score

N/A

Malware Config

Signatures

Files

4b6b210024acd2ff46e6320e6543f56fd6f10fed36e55b38a2d23c588f501eec
.exe windows x64

84da4a3165e248148f65dbe03b98a436

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueW

kernel32

SetErrorMode
FreeLibrary
CreateProcessW
LoadLibraryExW
WaitForSingleObject
GetModuleHandleW
WideCharToMultiByte
GetSystemWow64DirectoryW
FormatMessageW
GetExitCodeProcess
SetFilePointer
ReadFile
CreateFileW
lstrcmpW
lstrlenW
Wow64EnableWow64FsRedirection
GetLastError
GetProcAddress
LocalAlloc
HeapSetInformation
CloseHandle
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
GetCommandLineW
lstrcpynW
GetTickCount
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter

user32

LoadStringW
CharNextW

msvcrt

exit
_wcmdln
_initterm
_amsg_exit
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
_cexit
__C_specific_handler
__wgetmainargs
__argc
wcscpy_s
strcat_s
__wargv
_wsplitpath_s
wcsncpy_s
swprintf_s
_exit
_XcptFilter
wcscat_s
memset

ole32

OleInitialize
OleUninitialize

ntdll

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

comctl32

ord344

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 584KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

84da4a3165e248148f65dbe03b98a436

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

msvcrt

ole32

ntdll

comctl32

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 2KB

.pdata Size: 512B - Virtual size: 396B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 584KB - Virtual size: 1.9MB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 2KB

.pdata
Size: 512B - Virtual size: 396B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 584KB - Virtual size: 1.9MB