3ff0c901e050c30ed798f75510f47ddc2a1abda65d3eaa4b3642e3038d6874fa

Sharing

Copy URL Twitter E-mail

General

Target

3ff0c901e050c30ed798f75510f47ddc2a1abda65d3eaa4b3642e3038d6874fa
Size

120KB
MD5

20f6cc0af9c8629bec63ee8a53004340
SHA1

44437b2b29168daec6aa5a6366237936f1d2e5ec
SHA256

3ff0c901e050c30ed798f75510f47ddc2a1abda65d3eaa4b3642e3038d6874fa
SHA512

a9cc72c82c0d9563496eaacdb11557e0257f543e73a75423205845741058944ccf6efc42b536f52fbdb772988f73710186d7e089370f1876538d87657cd4c597
SSDEEP

3072:mJLp0BRKc2+lvYnk3NZjlvYOLCHlV+cufX:qijKVIigCHlVBk

Score

N/A

Malware Config

Signatures

Files

3ff0c901e050c30ed798f75510f47ddc2a1abda65d3eaa4b3642e3038d6874fa
.exe windows x86

ed4dd8db2778c6f86997e7e9271107cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
lstrlenA
SetFilePointer
GetFileSize
CreateFileA
SetCurrentDirectoryA
lstrcpynA
lstrcatA
GetCurrentDirectoryA
TerminateProcess
LoadLibraryA
FreeLibrary
HeapAlloc
GetProcessHeap
HeapFree
CreateProcessA
OutputDebugStringA
WinExec
LocalFree
FormatMessageA
GetLastError
SetTapeParameters
PrepareTape
SetTapePosition
GetTapeStatus
GetTapeParameters
ReadFile
GetStringTypeA
SetConsoleCtrlHandler
GetOEMCP
WaitForSingleObjectEx
Sleep
GetExitCodeProcess
lstrcpyA
CloseHandle
GetLocalTime
ExitProcess
GetProcAddress
GetModuleHandleA
GetCurrentProcess
RtlUnwind
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
FlushFileBuffers
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
IsBadWritePtr
InterlockedExchange
HeapSize
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetLocaleInfoA
GetCPInfo
SetStdHandle
GetACP
GetStringTypeW

user32

wsprintfA
LoadStringA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegConnectRegistryA

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ed4dd8db2778c6f86997e7e9271107cd

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 40KB - Virtual size: 36KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 4KB - Virtual size: 2KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 40KB - Virtual size: 36KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 4KB - Virtual size: 2KB

.rmnet
Size: 60KB - Virtual size: 60KB