7921410cf6a12796c025f3cad3e0e853b24d063624543fb9a7e62649d932821a

Sharing

Copy URL Twitter E-mail

General

Target

7921410cf6a12796c025f3cad3e0e853b24d063624543fb9a7e62649d932821a
Size

103KB
MD5

1d25702e92727da32fab205f38cb2730
SHA1

63db20729f57235f9cdf80bc1f419d3f0287ab06
SHA256

7921410cf6a12796c025f3cad3e0e853b24d063624543fb9a7e62649d932821a
SHA512

3f42ab6f4aed870c5a60b015f9f4ab738e91ccc13407f670f3fe5b97642aa71fa0ca15fd0ff8038aa7c906d605fed3501bdf007f3fd8086bef07dab49ba0d4af
SSDEEP

3072:ahwj+8V0yIB5wqY/jsoIGBmdDQ+rI5zlalX+wx8+V:ahqeyIBi/jsozciQXdD

Score

N/A

Malware Config

Signatures

Files

7921410cf6a12796c025f3cad3e0e853b24d063624543fb9a7e62649d932821a
.exe windows x86

6dc614654ea88ce9d8f2014256978bb1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

libufun

UF_MISC_set_program_name
UF_initialize
UF_get_fail_message
UF_PART_open
UF_CAM_init_session
UF_SETUP_ask_setup
UF_SETUP_ask_program_root
UF_NCGROUP_ask_object_of_name
UF_SETUP_generate_program
UF_terminate
UF_translate_variable
UF_ASSEM_ask_assem_options
UF_ASSEM_set_search_directories
UF_ASSEM_set_assem_options
UF_PART_ask_units
UF_free
UF_free_string_array

msvcr100

_crt_debugger_hook
fprintf
__iob_func
tolower
??_V@YAXPAX@Z
strncpy
??_U@YAPAXI@Z
memset
fopen
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
exit
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_invoke_watson
_controlfp_s

kernel32

IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
SetUnhandledExceptionFilter
EncodePointer
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange

Exports

Exports

?NXSigningResource@@YAXXZ

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 686B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

_n
Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6dc614654ea88ce9d8f2014256978bb1

Headers

DLL Characteristics

File Characteristics

Imports

libufun

msvcr100

kernel32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 856B

.reloc Size: 1024B - Virtual size: 686B

_n Size: 89KB - Virtual size: 92KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 856B

.reloc
Size: 1024B - Virtual size: 686B

_n
Size: 89KB - Virtual size: 92KB