c34aa1d5c2ea1da209f3602b2847574da973d74f720892f5e13cf627bc1970c7

Sharing

Copy URL Twitter E-mail

General

Target

c34aa1d5c2ea1da209f3602b2847574da973d74f720892f5e13cf627bc1970c7
Size

611KB
MD5

a22e8ceb2a84e21b74bc0da13bdfb220
SHA1

3c6ff1e98bac531958f60b700c0a4e3405fb858a
SHA256

c34aa1d5c2ea1da209f3602b2847574da973d74f720892f5e13cf627bc1970c7
SHA512

b0c1f7e8339dd1b518c8b0a0560ce2d367fce1c007995bc63daa8f8f7f94a85354f6feecb29ff37e465989d81cbf1e524c40baf1ee714e3e4624efaf56c67d51
SSDEEP

12288:lxMIcs9xXiYXwdWiDoVe5JTqM847BO0eP8MmyW+IUcFxFvPw04La:Q5s2hdWiDoYnN84U065m2I3nFvPR4u

Score

N/A

Malware Config

Signatures

Files

c34aa1d5c2ea1da209f3602b2847574da973d74f720892f5e13cf627bc1970c7
.exe windows x64

228c7aafe340361ea3bef648bbcc00f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

IsTextUnicode

kernel32

HeapSetInformation
SetLastError
GetStdHandle
GetFileType
MultiByteToWideChar
GetConsoleOutputCP
GlobalAlloc
GlobalLock
GlobalFree
GlobalUnlock
GetLastError
ReadFile
GetModuleFileNameW
LocalFree
CompareStringA
HeapSize
GetThreadLocale
VerifyVersionInfoW
lstrlenW
CompareStringW
WriteConsoleW
HeapValidate
FormatMessageW
GetConsoleMode
WideCharToMultiByte
SetThreadUILanguage
GetProcessHeap
HeapFree
VerSetConditionMask
HeapAlloc
HeapReAlloc
ExitProcess
GetCurrentProcessId
GetCurrentThreadId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
Sleep
GetSystemTimeAsFileTime

msvcrt

?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
exit
_cexit
_exit
_XcptFilter
__C_specific_handler
__wgetmainargs
__iob_func
wcstoul
fflush
_errno
wcstol
fprintf
_vsnwprintf
_fileno
wcstod
_memicmp
_get_osfhandle
memset
memcpy

user32

EmptyClipboard
CloseClipboard
SetClipboardData
LoadStringW
CharUpperW
OpenClipboard

ws2_32

WSACleanup

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

shlwapi

StrStrW
StrStrIW
StrChrW
StrChrIW

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 580KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

228c7aafe340361ea3bef648bbcc00f8

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

ws2_32

version

shlwapi

Sections

.text Size: 26KB - Virtual size: 25KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 888B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 580KB - Virtual size: 1.9MB

.text
Size: 26KB - Virtual size: 25KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 888B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 580KB - Virtual size: 1.9MB