1a3df655ee2cc4d8345f48c6d898491821fe134709a34303eb072cd2bbaa5739

Sharing

Copy URL Twitter E-mail

General

Target

1a3df655ee2cc4d8345f48c6d898491821fe134709a34303eb072cd2bbaa5739
Size

269KB
MD5

0d5d9c3313d2c17ffbf11a974d700e1d
SHA1

1b4159acb0ee08d16231e8b7eddd14867fc432ec
SHA256

1a3df655ee2cc4d8345f48c6d898491821fe134709a34303eb072cd2bbaa5739
SHA512

7c1d2e6740b6ccb56cd5c360a4c04f94179be6e84984593859e93460129e2f37318bc804e15d7412a5e4da4a8f312d0bd259fb3c15b683a827d97084849ec229
SSDEEP

6144:22XA+ukxSqlJ76RcgCtiIJUTdJgp22zBoP2vc+s+8Q0LrXVCZV:22Q+uSTlJ76RFwiI0dap2wYack0LL0V

Score

N/A

Malware Config

Signatures

Files

1a3df655ee2cc4d8345f48c6d898491821fe134709a34303eb072cd2bbaa5739
.exe windows x86

e457074c9a35bdd7699aedc0ad54ce7a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetModuleFileNameA
VirtualQuery
HeapAlloc
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
Sleep
OutputDebugStringW
GetTickCount
CloseHandle
CreateEventA
SetEnvironmentVariableA
CompareStringW
HeapFree
WriteConsoleW
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetConsoleMode
GetConsoleCP
MultiByteToWideChar
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetTimeZoneInformation
QueryPerformanceCounter
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
ExitProcess
GetLocaleInfoW
GetModuleFileNameW
UnregisterWait
SetEvent
DuplicateHandle
GetCurrentProcess
GetLastError
ConnectNamedPipe
ResetEvent
GetOverlappedResult
ReadFile
DisconnectNamedPipe
GetCurrentProcessId
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
UnregisterWaitEx
QueueUserWorkItem
InterlockedIncrement
RegisterWaitForSingleObject
WriteFile
CreateNamedPipeW
CreateEventW
CreateMutexW
OpenProcess
ReadProcessMemory
GetSystemTimeAsFileTime
LoadLibraryW
GetProcAddress
FreeLibrary
CreateFileW
GetSystemTime
FindClose
FindNextFileW
FlushFileBuffers
CreateDirectoryW
GetFileAttributesW
SetFileAttributesW
GetFileTime
DeleteFileW
SetEndOfFile
SetFilePointer
FindFirstFileW
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
RaiseException
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
IsProcessorFeaturePresent
GetStdHandle

tier0_s

?Push@CValidator@@QAEXPBDPAX0@Z
?ClaimArrayMemory@CValidator@@QAEXPAX@Z
?Pop@CValidator@@QAEXXZ
??1CThreadMutex@@QAE@XZ
g_dwDllEntryThreadId
??0CThreadMutex@@QAE@XZ
g_pMemAllocSteam
Plat_IsInDebugSession
WriteMiniDump
Plat_ExitProcess
AssertMsgImplementation

vstdlib_s

V_FixDoubleSlashes
Q_snprintf
Q_UTF16ToUTF8
Q_UTF8ToUTF16
Q_strncat
Q_StripTrailingSlash
Q_StripLastDir
Q_FixSlashes
Q_MakeAbsolutePath
Q_strncpy

psapi

EnumProcessModules
GetModuleBaseNameW

wininet

InternetCrackUrlW
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpAddRequestHeadersW
InternetSetOptionW
HttpSendRequestW
HttpQueryInfoW
InternetQueryDataAvailable
InternetReadFile
InternetCloseHandle

Sections

.text
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rrdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e457074c9a35bdd7699aedc0ad54ce7a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

tier0_s

vstdlib_s

psapi

wininet

Sections

.text Size: 137KB - Virtual size: 137KB

.rdata Size: 23KB - Virtual size: 22KB

.data Size: 6KB - Virtual size: 18KB

.rsrc Size: 14KB - Virtual size: 14KB

.reloc Size: 10KB - Virtual size: 9KB

.rrdata Size: 72KB - Virtual size: 72KB

.text
Size: 137KB - Virtual size: 137KB

.rdata
Size: 23KB - Virtual size: 22KB

.data
Size: 6KB - Virtual size: 18KB

.rsrc
Size: 14KB - Virtual size: 14KB

.reloc
Size: 10KB - Virtual size: 9KB

.rrdata
Size: 72KB - Virtual size: 72KB