64a0a5840f0229839a6694de315799e4[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

64a0a5840f0229839a6694de315799e4.exe
Size

3.3MB
MD5

64a0a5840f0229839a6694de315799e4
SHA1

1d1211dc337a863585a1d9f51318ac5a9e8f8943
SHA256

ce7ce84e2c26ae064edc981fd8e7e38e4a15e98ce80862675fc2245460d2dca8
SHA512

3ad54fe67911afc13a1641b964337a9f261aa4652eacdf129ed19a61749260de56cbe08e718e011ae24cdd6dac1894630a00e586eb9805e30187b51e169be018
SSDEEP

98304:UIttVtdVtfBjzItd14u/G/o/YpVY+p8RhhCwIw+cghrp:UWtVtdVtZjzGwuO3pJaF6w+vhV

Score

N/A

Malware Config

Signatures

Files

64a0a5840f0229839a6694de315799e4.exe
.exe windows x64

e7d5dacc0da7481a9d9e940b4b83da49

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

comctl32

ord17

kernel32

FreeLibrary
SystemTimeToFileTime
SetFileTime
InitializeCriticalSection
WideCharToMultiByte
LeaveCriticalSection
FindFirstFileA
GetLastError
GetProcAddress
EnterCriticalSection
FindClose
LoadLibraryA
SetEnvironmentVariableA
GetModuleFileNameA
FindNextFileA
GetModuleHandleA
LoadLibraryExA
DeleteCriticalSection
CreateFileA
OutputDebugStringA
GetVersionExA
CloseHandle
GetFileInformationByHandle
GetTempPathA
FindResourceA
LoadResource
LockResource
SetLastError
VirtualProtect
VirtualFree
RtlDeleteFunctionTable
RtlAddFunctionTable
VirtualAlloc
MultiByteToWideChar
ExitThread
RtlLookupFunctionEntry
RtlVirtualUnwind
GetComputerNameA
GetShortPathNameW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext

user32

MessageBoxA

advapi32

GetUserNameA

msvcrt

strchr
fflush
atoi
_errno
strncpy
fgets
_environ
fread
rand
localtime
srand
isdigit
fwrite
toupper
time
atol
getenv
fclose
memmove
strrchr
memset
strcmp
memcpy
strcpy
strlen
wcscmp
memcmp
_rmdir
_chmod
_fileno
_putenv
_strdup
strstr
_getpid
_strnicmp
_unlink
_dup2
_mkdir
_stricmp
__dllonexit
_onexit
__C_specific_handler
_XcptFilter
_c_exit
_exit
_cexit
exit
__initenv
__getmainargs
_initterm
__setusermatherr
_commode
_fmode
__set_app_type
vsprintf
perror
sprintf
fputc
abort
_iob
fprintf
malloc
free
_stat
fputs
fopen
calloc
_setjmp

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7d5dacc0da7481a9d9e940b4b83da49

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

advapi32

msvcrt

Sections

.text Size: 65KB - Virtual size: 65KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 5KB - Virtual size: 7KB

.pdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 3.2MB - Virtual size: 3.2MB

.text
Size: 65KB - Virtual size: 65KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 5KB - Virtual size: 7KB

.pdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 3.2MB - Virtual size: 3.2MB