8de2b80e467cfe75c8cac4eca1916d0a15e79e4321ad977ef61e31b43af3baed

Sharing

Copy URL Twitter E-mail

General

Target

8de2b80e467cfe75c8cac4eca1916d0a15e79e4321ad977ef61e31b43af3baed
Size

59KB
MD5

086b96f47a5b2fd17cd36b64c5beafe0
SHA1

030c3ce0aa883017fbf40add5086403936097369
SHA256

8de2b80e467cfe75c8cac4eca1916d0a15e79e4321ad977ef61e31b43af3baed
SHA512

c3649eb834dd83364f81f24e555b57b2dac860dc444b1dc84a2d44185e6d7ab10d9853762ea732a1096438d072030e2eae7274edb8de8d055bc84e487ef3aef7
SSDEEP

768:ooxAloXEOn6ZjiXbYIdEQ4NK9WnF5shWeeHwWJO:ooxNOZji4GEeJW0

Score

N/A

Malware Config

Signatures

Files

8de2b80e467cfe75c8cac4eca1916d0a15e79e4321ad977ef61e31b43af3baed
.exe windows x86

2ca465b0e339a6c74b3af85dd2b39514

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexW
GetLastError
CloseHandle
GetCommandLineW
LocalFree
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
IsDebuggerPresent
IsProcessorFeaturePresent
SetLastError
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitOnceExecuteOnce
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
HeapFree
Sleep
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
RtlUnwind
HeapAlloc
HeapReAlloc
WideCharToMultiByte
GetStringTypeW
HeapSize
LCMapStringEx
CreateFileW

user32

EnumDisplaySettingsW
GetAutoRotationState
SendInput

shell32

CommandLineToArgvW

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2ca465b0e339a6c74b3af85dd2b39514

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 3KB - Virtual size: 11KB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 6KB - Virtual size: 5KB

.text Size: 5KB - Virtual size: 4KB

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 3KB - Virtual size: 11KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 6KB - Virtual size: 5KB

.text
Size: 5KB - Virtual size: 4KB