ac359ee6535e7efe6d4fdfe067ee05448a4c061dcdcafee48f19673468a8567c

Sharing

Copy URL Twitter E-mail

General

Target

ac359ee6535e7efe6d4fdfe067ee05448a4c061dcdcafee48f19673468a8567c
Size

428KB
MD5

04685ac535c640dc1227b04582f31f00
SHA1

2c81ccbce27da611a41aa7d0620230a259186981
SHA256

ac359ee6535e7efe6d4fdfe067ee05448a4c061dcdcafee48f19673468a8567c
SHA512

a22736c08e9f53be97c1e1b0c5ad4e6fba05ccde776e4c64271546846027fa15dc885f74eebffa8879a19c46733f9d209bb646cc4d0851c988aafabce3a1a010
SSDEEP

12288:4vRfVHstwL79qd+I2XLaAzi77+DHRRJhnQ9z8hPMWVl:goBAGExRJhnQCMWz

Score

N/A

Malware Config

Signatures

Files

ac359ee6535e7efe6d4fdfe067ee05448a4c061dcdcafee48f19673468a8567c
.exe windows x86

54c979e53d4a3427212b5d1e7edb8804

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
VirtualAlloc
GetOEMCP
InterlockedDecrement
GetEnvironmentStrings
GetTickCount
GetVersionExA
ExitProcess
WaitForSingleObject
SetHandleCount
GetConsoleMode
DeleteCriticalSection
LocalFree
InterlockedExchange
GetFileSize
LCMapStringW
GetEnvironmentStringsW
TryEnterCriticalSection
RaiseException
FlushFileBuffers
GetVersionExW
GetStdHandle
InitializeCriticalSection
HeapAlloc
WideCharToMultiByte
GetModuleHandleW
InterlockedCompareExchange
CreateFileA
FreeEnvironmentStringsW
FindClose
LeaveCriticalSection
TerminateProcess
QueryPerformanceCounter
GetProcessHeap
LoadLibraryA
WaitForSingleObjectEx
EnterCriticalSection
InterlockedIncrement
FormatMessageW
CreateFileW
HeapDestroy
CreateThread
SetFilePointerEx
FreeLibraryAndExitThread
GetCurrentProcess
GetACP
WriteFile
GetModuleHandleA
GetModuleFileNameA
HeapFree
CloseHandle
Sleep
FreeLibrary
CreateEventW
SetEvent
MultiByteToWideChar
ReadFile
SetErrorMode
GetModuleFileNameW
SetFilePointer
lstrlenW
GetCurrentThread
GetCommandLineA
GetCommandLineW
CreateEventA
CompareStringW
CompareStringA
GetStringTypeW
CreateMutexA
GetStartupInfoA
GetVersion
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
HeapCreate
VirtualFree
RtlUnwind
FatalAppExitA
GetCPInfo
HeapReAlloc
IsBadWritePtr
GetProcAddress
LCMapStringA
GetStringTypeA
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
SetEnvironmentVariableA

ole32

CoReleaseMarshalData

iphlpapi

GetTcpStatisticsEx

Sections

.text
Size: 376KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54c979e53d4a3427212b5d1e7edb8804

Headers

File Characteristics

Imports

kernel32

ole32

iphlpapi

Sections

.text Size: 376KB - Virtual size: 372KB

.code Size: 12KB - Virtual size: 10KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 16KB - Virtual size: 24KB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 376KB - Virtual size: 372KB

.code
Size: 12KB - Virtual size: 10KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 16KB - Virtual size: 24KB

.rsrc
Size: 12KB - Virtual size: 9KB