4659a7a1f74566ea200e4488ec4970e477e161c72c441373905ed7faf523b022

Sharing

Copy URL Twitter E-mail

General

Target

4659a7a1f74566ea200e4488ec4970e477e161c72c441373905ed7faf523b022
Size

375KB
MD5

0e88bea6be665c974614320e9828e860
SHA1

a48e030b217747d876f84d25259637efc93be246
SHA256

4659a7a1f74566ea200e4488ec4970e477e161c72c441373905ed7faf523b022
SHA512

53e893d79f2cd19747ee15df380cb400e78d6a9197806dc23903765ee8f10f871426aa5bb9a840ae3946a241eb240a65ae4c40dd9fd2de1df133a677c5d865e8
SSDEEP

6144:lFzjJn3+5oAQayH96IYKViyjrS8FxC57m0JHsvviKt9lq8UOajO:Tt+51Qae1PjrLFMw0CDt9lqVi

Score

N/A

Malware Config

Signatures

Files

4659a7a1f74566ea200e4488ec4970e477e161c72c441373905ed7faf523b022
.exe windows x86

bc3827af2721c67cef1094394b2378ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetCurrentDirectoryA
GlobalAlloc
GetComputerNameA
GetLastError
lstrlenA
LoadLibraryA
FindNextFileW
FindCloseChangeNotification
SetFilePointerEx
InterlockedCompareExchange
ExitProcess
WaitForSingleObjectEx
SetFilePointer
GetVersionExW
GlobalFree
GetLocaleInfoA
CreateFileMappingA
LockResource
LocalAlloc
FreeEnvironmentStringsW
FindFirstFileA
GetExitCodeProcess
DeleteFileW
GlobalUnlock
SetLastError
Sleep
WriteConsoleW
CreateEventW
GetModuleHandleW
GlobalLock
LCMapStringA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
IsValidCodePage
GetStartupInfoW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetCurrentThread
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
IsValidLocale
SetEnvironmentVariableA

user32

TrackPopupMenu
SetWindowTextW
GetMenu
CreateWindowExW
SetMenuContextHelpId
GetWindowLongW

advapi32

GetUserNameA

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 301KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc3827af2721c67cef1094394b2378ae

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 49KB - Virtual size: 49KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 301KB - Virtual size: 340KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 49KB - Virtual size: 49KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 301KB - Virtual size: 340KB

.rsrc
Size: 17KB - Virtual size: 16KB