95577b3f26d560f6d0b7fbfafd791497f688261f0c3143801396e7d18bf2335e

Sharing

Copy URL Twitter E-mail

General

Target

95577b3f26d560f6d0b7fbfafd791497f688261f0c3143801396e7d18bf2335e
Size

227KB
MD5

0ccd020a8b387e4e4bc9e7354fd77f10
SHA1

893fdfa618d09b54286c9c684124123a50c0fa96
SHA256

95577b3f26d560f6d0b7fbfafd791497f688261f0c3143801396e7d18bf2335e
SHA512

f998b6404d5ff47a1ca09289bdf5717d8a798e6239fdbaeb7bf9b333561ec4ab5ba5677bdcdaa45ae06c9b16e34f2bc9b279a604fd91820a57cb9dc7202a1921
SSDEEP

6144:B/7QuJ3PhjxcdOWz7Ndo1gGjtsvUVaCxJTuMBK:xlcsWddMgH8gOJ3K

Score

N/A

Malware Config

Signatures

Files

95577b3f26d560f6d0b7fbfafd791497f688261f0c3143801396e7d18bf2335e
.exe windows x86

23a799b3e9651a92a4683ffe00f22413

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CallNamedPipeA
CloseHandle
CreateFileA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeExA
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetConsoleTitleW
SetFilePointer
SetHandleCount
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
lstrcmpiA

shell32

DoEnvironmentSubstW
DragQueryPoint
ExtractIconExA
ShellExecuteA

user32

EnumThreadWindows
MessageBoxA
wsprintfA

Exports

Exports

__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23a799b3e9651a92a4683ffe00f22413

Headers

File Characteristics

Imports

kernel32

shell32

user32

Exports

Exports

Sections

.text Size: 35KB - Virtual size: 36KB

.data Size: 14KB - Virtual size: 32KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 170KB - Virtual size: 169KB

.reloc Size: 2KB - Virtual size: 4KB

.text
Size: 35KB - Virtual size: 36KB

.data
Size: 14KB - Virtual size: 32KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 170KB - Virtual size: 169KB

.reloc
Size: 2KB - Virtual size: 4KB