f503c9330f1ab8646d661663bee193621f88b2e3933546d5c7ead6c5653f80a4

Sharing

Copy URL

Twitter E-mail

General

Target

f503c9330f1ab8646d661663bee193621f88b2e3933546d5c7ead6c5653f80a4
Size

252KB
MD5

83737872a93e5a304728bba62a242b3d
SHA1

66282b8cd0058c5956da731041c57fbc30bc3c2e
SHA256

f503c9330f1ab8646d661663bee193621f88b2e3933546d5c7ead6c5653f80a4
SHA512

d321ce62be89398430583f9b4a12c30672a1f8799ca7689a577bee354eff47be236d7a77ae2be45dc9c77acafc7e39ea7340ddd4a67430d11b4ee2afa31ed3ec
SSDEEP

6144:PkBsuXMA98LafTa3wyskFSMFsSSexWGxW76CcrsSEmoP:Pjqd98LafTJyPbFsSSexlx9C1PT

Score

N/A

Malware Config

Signatures

Files

f503c9330f1ab8646d661663bee193621f88b2e3933546d5c7ead6c5653f80a4
.exe windows x86

a1849940a9a744c7f65d2b46eeb691e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetTickCount
CreateFileW
GetPrivateProfileIntW
GetModuleHandleW
GetThreadPriority
ChangeTimerQueueTimer
DebugBreak
WriteConsoleOutputCharacterA
FlushInstructionCache
SetHandleCount
GetStringTypeW
LCMapStringW
GetModuleFileNameW
CloseHandle
MapViewOfFile
OpenFileMappingA
lstrcpyA
lstrlenA
GetModuleFileNameA
UnmapViewOfFile
LoadLibraryA
GetCurrentProcessId
Sleep
lstrcatA
GetLastError
HeapFree
RtlUnwind
EncodePointer
DecodePointer
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
HeapSize
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
RaiseException
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
WriteFile
GetPriorityClass
SetPriorityClass
GetFileAttributesA
OpenProcess
GetVersionExA
lstrlenW
WideCharToMultiByte
GetProcAddress
MultiByteToWideChar
GetCurrentDirectoryA
lstrcmpA
GetLocalTime
GetTimeZoneInformation
HeapSetInformation
InterlockedIncrement
InterlockedDecrement
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
ReadFile

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.BSS
Size: 6KB - Virtual size: 343.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a1849940a9a744c7f65d2b46eeb691e0

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 90KB - Virtual size: 89KB

.rdata Size: 19KB - Virtual size: 18KB

.BSS Size: 6KB - Virtual size: 343.3MB

.rsrc Size: 136KB - Virtual size: 137KB

.text
Size: 90KB - Virtual size: 89KB

.rdata
Size: 19KB - Virtual size: 18KB

.BSS
Size: 6KB - Virtual size: 343.3MB

.rsrc
Size: 136KB - Virtual size: 137KB