2604a0971a6054461835b822cb101a175c46feb86407634ab12de5486a7023cb

Sharing

Copy URL Twitter E-mail

General

Target

2604a0971a6054461835b822cb101a175c46feb86407634ab12de5486a7023cb
Size

579KB
MD5

11b30fa9a90498616501ecb382661ab0
SHA1

c46697a0dc356c240db16dfa8199690187a407d2
SHA256

2604a0971a6054461835b822cb101a175c46feb86407634ab12de5486a7023cb
SHA512

ae79e1041ea46b4791d15f4b74e68a75347734e5c699234be19a8c61f0f29dd468f6caea0e2689140ba0a14e1de8111db781dda658c055cd1307abe55608f8d8
SSDEEP

6144:HZ9sLpzlb91mzabalOX5ZyEWwRnJNGn84AgI8rlzM2YsCkbZRiY1VaPhZk:59sLPGz1O/51a8VgIwzM2jCkbzP10P

Score

N/A

Malware Config

Signatures

Files

2604a0971a6054461835b822cb101a175c46feb86407634ab12de5486a7023cb
.exe windows x86

4956bdca42edcb67c8f814edb3e99936

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

GetPerformanceInfo

ole32

CoUninitialize
CoInitialize

crypt32

CertFreeCTLContext

kernel32

CreateFileA
GetCurrentThreadId
InterlockedIncrement
GetCurrentProcess
OpenSemaphoreA
GetCurrentThread
VirtualFree
LoadLibraryW
TerminateThread
Sleep
TerminateProcess
InterlockedExchange
GetLastError
GetProcAddress
VirtualAlloc
ResetEvent
OpenEventA
SetThreadAffinityMask
ReleaseMutex
CloseHandle
ResumeThread
GetCommandLineA
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
InterlockedDecrement
HeapCreate
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapAlloc
HeapReAlloc
RaiseException
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
ReadFile
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 500KB - Virtual size: 920KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4956bdca42edcb67c8f814edb3e99936

Headers

DLL Characteristics

File Characteristics

Imports

psapi

ole32

crypt32

kernel32

Sections

.text Size: 55KB - Virtual size: 55KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 6KB - Virtual size: 13KB

.rsrc Size: 500KB - Virtual size: 920KB

.text
Size: 55KB - Virtual size: 55KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 6KB - Virtual size: 13KB

.rsrc
Size: 500KB - Virtual size: 920KB