74c27dc794004765b7fb0c9f8407a49f528da2ba242b971ba257b5c47035af5d

Sharing

Copy URL Twitter E-mail

General

Target

74c27dc794004765b7fb0c9f8407a49f528da2ba242b971ba257b5c47035af5d
Size

622KB
MD5

16017c49ec8f4d5b16e7d474a9969250
SHA1

74da6e0d94f432aa8ef989ca24c26cf99ac4bae3
SHA256

74c27dc794004765b7fb0c9f8407a49f528da2ba242b971ba257b5c47035af5d
SHA512

ca4c7b94de965a4682c8bc6fafdfbbce50dba72f0e56ddce3bfa78cc9bb2b3beeb14ca87bb5b7edcaad2b8aa50ba158b0c9b993107054605b2789294acf4876e
SSDEEP

12288:WhM+oK9QABA0CIKz9IKIGdKKWsI6fIXQRIBE5oBSW/x2fQIub8+gLKqWeAVl5aKU:WhM+oK9QAARrbVdKKlI6fIXQReE5oBLq

Score

N/A

Malware Config

Signatures

Files

74c27dc794004765b7fb0c9f8407a49f528da2ba242b971ba257b5c47035af5d
.exe windows x86

3c55102a0a2639a3d4fe91f8c0c3be5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
GetConsoleOutputCP
WriteConsoleW
GetConsoleMode
GetFileType
GetStdHandle
FormatMessageW
LocalFree
FreeLibrary
LoadLibraryExW
ReadConsoleW
SetConsoleMode
HeapSize
GetFullPathNameW
HeapAlloc
InterlockedCompareExchange
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
InterlockedExchange
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
WriteFile
HeapFree
HeapSetInformation
GetLastError
GetProcessHeap
Sleep
SetThreadPreferredUILanguages

msvcrt

__wgetmainargs
_wsetlocale
__CxxFrameHandler3
_controlfp
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
??1type_info@@UAE@XZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
memset
_wcsicmp
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
?terminate@@YAXXZ
_callnewh
malloc
_CxxThrowException
memcpy
towupper
wcsncmp
free
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
??0exception@@QAE@XZ
_wtoi64
_vsnwprintf

oleaut32

VariantClear
VariantInit
SysStringByteLen
SysAllocString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
VariantCopy
SysFreeString
SysStringLen

ole32

CoSetProxyBlanket
CoCreateInstance
CoInitializeSecurity
CoInitializeEx

profapi

ord103

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 564KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3c55102a0a2639a3d4fe91f8c0c3be5b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

oleaut32

ole32

profapi

Sections

.text Size: 54KB - Virtual size: 53KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 564KB - Virtual size: 2.3MB

.text
Size: 54KB - Virtual size: 53KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 564KB - Virtual size: 2.3MB