f47580bddc051e0c939808865dd66af10b3c8af7af906745727d78c2e5827957

Sharing

Copy URL Twitter E-mail

General

Target

f47580bddc051e0c939808865dd66af10b3c8af7af906745727d78c2e5827957
Size

187KB
MD5

0c828985c465544c594735de5f8cc78f
SHA1

8a86072e1d14b88ab3b09dfe770e1a7801751f30
SHA256

f47580bddc051e0c939808865dd66af10b3c8af7af906745727d78c2e5827957
SHA512

9061a8f33d32c33a33d30d0b276ec12836717954b17936335f01ee0812b25360354785aab1c12d9733a8335f26a2e6d4a736de9934db4cf449217eec443d3d93
SSDEEP

3072:skaiH0zkbnNumqOVyQaLdh+0Yt+HcEJ62WkmI0RnxEPcrCBlweqS89qC2mBKrB:BH0MVodhetqcEJ6RkmIAnxIPB7j88C2L

Score

N/A

Malware Config

Signatures

Files

f47580bddc051e0c939808865dd66af10b3c8af7af906745727d78c2e5827957
.exe windows x86

22f10dffe4af39f9fc1fd4e14260fc9b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetLastError
HeapFree
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapCreate
HeapAlloc
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
LoadLibraryW
RtlUnwind
SetStdHandle
WriteConsoleW
MultiByteToWideChar
LCMapStringW
GetStringTypeW
IsProcessorFeaturePresent
HeapSize
CreateFileW
CloseHandle
FlushFileBuffers

user32

wvsprintfA

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 142KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gpvqfqf
Size: - Virtual size: 80KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

22f10dffe4af39f9fc1fd4e14260fc9b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 30KB - Virtual size: 30KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 142KB - Virtual size: 169KB

gpvqfqf Size: - Virtual size: 80KB

.text
Size: 30KB - Virtual size: 30KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 142KB - Virtual size: 169KB

gpvqfqf
Size: - Virtual size: 80KB