2fcb7b857159384ee61fcd62aec87c25ac1cb3415f147df263737d6918117cdc

Sharing

Copy URL Twitter E-mail

General

Target

2fcb7b857159384ee61fcd62aec87c25ac1cb3415f147df263737d6918117cdc
Size

572KB
MD5

048e65fe4234eae9b2b34ef1c89b86f0
SHA1

bd1f4bf94d38b5f538f9dd8be9c39b4ee4e2aee7
SHA256

2fcb7b857159384ee61fcd62aec87c25ac1cb3415f147df263737d6918117cdc
SHA512

50dd76ee57b25fab7cd75411f1d4a5e93c539a643cf56ab40f7195a48f96dbfe365defd03097b6a2c1b12f8475a2884c1083fb5cc1936b73d66db37ae338ae79
SSDEEP

12288:cVzj9xc+cO7ldsT81uMfXeXJxoRdLAvz3w1J7CZSEat9A6vi9:cVzj9xc+cO7zs4Eg1J7hEat26i

Score

N/A

Malware Config

Signatures

Files

2fcb7b857159384ee61fcd62aec87c25ac1cb3415f147df263737d6918117cdc
.dll windows x86

9a2192961a121008570daf51c038e832

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
Sleep
EnterCriticalSection
GetModuleHandleA
GetVersionExA
LeaveCriticalSection
GetLastError
GlobalFree
DeleteCriticalSection
GlobalAlloc
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
GetProcAddress
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
RaiseException
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InterlockedDecrement
InterlockedIncrement
HeapAlloc
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
SetFilePointer
CloseHandle
SetStdHandle

gdi32

CreateDCA
ExtEscape
DeleteDC
GetDeviceCaps

Exports

Exports

devProcessAttach

Sections

.text
Size: 400KB - Virtual size: 398KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9a2192961a121008570daf51c038e832

Headers

File Characteristics

Imports

kernel32

gdi32

Exports

Exports

Sections

.text Size: 400KB - Virtual size: 398KB

.rdata Size: 48KB - Virtual size: 45KB

.data Size: 24KB - Virtual size: 28KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 32KB - Virtual size: 30KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 400KB - Virtual size: 398KB

.rdata
Size: 48KB - Virtual size: 45KB

.data
Size: 24KB - Virtual size: 28KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 32KB - Virtual size: 30KB

.rmnet
Size: 60KB - Virtual size: 60KB