bec2c278d8476d2be76766070103bd7a41037ace6185e3828745b0a8a3d51458

Sharing

Copy URL Twitter E-mail

General

Target

bec2c278d8476d2be76766070103bd7a41037ace6185e3828745b0a8a3d51458
Size

99KB
MD5

2bd75e80f0f4690179842b1d1c82b248
SHA1

3300c652b094622cd304788a3b62037c6a04ec1c
SHA256

bec2c278d8476d2be76766070103bd7a41037ace6185e3828745b0a8a3d51458
SHA512

13bbcdea37192fd67602130de1c93548ca62066677f36fb53d133ecdf728801c8d8de5a2051f38813082203264eac6610f240284534f326549847fdae8087e6b
SSDEEP

1536:sRJ4tFqijmDvKwaKNFaAENGzYE+ycXUEK/9sEpQ8WzMvHBThOIUHtflLUd/D:skFqijBgEyzY7g5/WzMZThOIUHt6d/D

Score

N/A

Malware Config

Signatures

Files

bec2c278d8476d2be76766070103bd7a41037ace6185e3828745b0a8a3d51458
.exe windows x86

6081abd02e06ad157363bbec38866d39

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

GetRequestedRuntimeInfo
GetRequestedRuntimeVersion
CorBindToRuntimeEx
GetCORVersion
LoadLibraryShim
GetRealProcAddress
CorGetSvc
GetCORSystemDirectory

msvcr80

_vsnprintf
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
?terminate@@YAXXZ
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__winitenv
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
free
malloc
_putws
_flushall
wcstoul
towupper
memmove
_vsnprintf_s
_errno
wcsncpy_s
wcscpy_s
strcpy_s
wcsncmp
strncmp
_vsnwprintf_s
strchr
_CxxThrowException
_wtoi
_wcsicmp
tolower
_wcsnicmp
exit
_purecall
memset
wcscat_s
__CxxFrameHandler3
memcpy
_vswprintf_c_l

advapi32

RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegCloseKey

kernel32

GetEnvironmentVariableW
GetEnvironmentVariableA
GetCurrentDirectoryW
GetCurrentDirectoryA
GetFileAttributesExW
GetFileAttributesExA
GetFileAttributesW
GetFileAttributesA
CreateEventW
CreateEventA
CreateMutexW
LocalAlloc
FormatMessageA
FormatMessageW
CreateProcessA
CreateProcessW
DebugBreak
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
TlsSetValue
TlsAlloc
TlsFree
HeapAlloc
GetProcessHeap
HeapFree
WaitForSingleObjectEx
ReleaseMutex
SleepEx
VirtualAlloc
VirtualFree
VirtualQuery
VirtualProtect
HeapCreate
HeapDestroy
HeapValidate
InterlockedExchange
Sleep
SetUnhandledExceptionFilter
GetTickCount
UnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameA
CloseHandle
WaitForSingleObject
GetCurrentProcessId
GetLocalTime
WriteFile
GetStdHandle
RaiseException
GetConsoleOutputCP
SetErrorMode
SetLastError
GetLastError
TlsGetValue
InterlockedCompareExchange
GetModuleHandleA
FreeLibrary
InterlockedIncrement
InterlockedDecrement
lstrlenW
GetCurrentProcess
LocalFree
MultiByteToWideChar
IsDBCSLeadByte
GetCPInfo
GetACP
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetFilePointer
GetVersionExA
GetModuleHandleW
WideCharToMultiByte
TerminateProcess
LoadLibraryExA
LoadLibraryExW
GetFullPathNameA
GetFullPathNameW
CreateMutexA
GetModuleFileNameW
CreateFileA
CreateFileW
CopyFileA
DeleteFileA
MoveFileExW
CreateSemaphoreA
CreateSemaphoreW
LCMapStringA
LCMapStringW
GetVersionExW
OutputDebugStringA
OutputDebugStringW

oleaut32

SetErrorInfo
SysAllocString
SysFreeString

user32

LoadStringA
LoadStringW

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6081abd02e06ad157363bbec38866d39

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

msvcr80

advapi32

kernel32

oleaut32

user32

Sections

.text Size: 87KB - Virtual size: 86KB

.data Size: 512B - Virtual size: 2KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 87KB - Virtual size: 86KB

.data
Size: 512B - Virtual size: 2KB

.rsrc
Size: 8KB - Virtual size: 8KB