201746548d74bb8fd2e7849161d7cc7c1318de3f3572a5a17a07e3afe6097cff

Sharing

Copy URL Twitter E-mail

General

Target

201746548d74bb8fd2e7849161d7cc7c1318de3f3572a5a17a07e3afe6097cff
Size

219KB
MD5

030c17397c4897df8bd47dc2149949e3
SHA1

9b0aca6dc489c811f74a49cbc3bf03e533b4550d
SHA256

201746548d74bb8fd2e7849161d7cc7c1318de3f3572a5a17a07e3afe6097cff
SHA512

4f200796e39907415fd3612f7f4ff3681e5b3617f1492745340127abadb6a016e0e1c58989df2dcf2ee6f93b54b3da31f345ef4d147b47d6ac7df884e060f848
SSDEEP

6144:Um9O03+sKFoWwOcUaIinkWIHZGFWfZ7HpD9+9Fy:c0Obouc3ReGuD9+94

Score

N/A

Malware Config

Signatures

Files

201746548d74bb8fd2e7849161d7cc7c1318de3f3572a5a17a07e3afe6097cff
.exe windows x86

9776dd158ff411257781736751f71e19

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileW
GetConsoleAliasExesLengthA
WritePrivateProfileSectionA
QueryDosDeviceA
VirtualFree
GetNumberFormatA
GetPrivateProfileStringW
GetSystemWindowsDirectoryA
HeapDestroy
LocalReAlloc
CreateFileW
lstrlenW
ReleaseSemaphore
FindClose
GetPrivateProfileStringA
SetCurrentDirectoryW
DeviceIoControl
GlobalAddAtomW
WriteFile
IsDBCSLeadByte
GetDiskFreeSpaceExA
SetThreadContext
GetQueuedCompletionStatus
OpenSemaphoreA
ProcessIdToSessionId
AddConsoleAliasA
GetFileType
WriteProfileStringA
EnumResourceNamesA
GetCurrentProcessId
FileTimeToDosDateTime
OpenFile
GetLocaleInfoA
SetWaitableTimer
GlobalAddAtomA
GetComputerNameW
FindNextVolumeMountPointA
FindResourceExA
WritePrivateProfileSectionW
IsValidLanguageGroup
GetVolumePathNameA
FindNextVolumeMountPointW
SetThreadLocale
VirtualAlloc
GetConsoleScreenBufferInfo
GetProfileStringA
QueryDosDeviceW
GetDiskFreeSpaceA
DuplicateHandle
GlobalReAlloc

ntdll

_allmul
_allshl
_aulldiv

Exports

Exports

?GienDansCarpfedspeakegerSerseh@@YGGPCUFiloBongBirler@@PCUVertGyriJupeAltoden@@ACN@Z
?JokeToomFeelcragHootBuffmasbi@@YGGACUNowttaosTareMeed@@_W@Z
?LilomakesandtoedSagyfir@@YGXACUDugswizli@@UGhatMulerazeLouthoe@@ACDACUPuntScag@@AC_K@Z
?MashTegsKoelRoutkitet@@YGKPCUSoupbilkwaulfe@@UtagMSG@@PCUGetaAgueleade@@ACIPCH@Z

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9776dd158ff411257781736751f71e19

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

Exports

Exports

Sections

.text Size: 75KB - Virtual size: 74KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 20B

.reloc Size: 141KB - Virtual size: 140KB

.text
Size: 75KB - Virtual size: 74KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 20B

.reloc
Size: 141KB - Virtual size: 140KB