ed9d44aef86181fb313e9efa86501b23e740c4feb08cc8c86a6367e873c4cd8e

Sharing

Copy URL

Twitter E-mail

General

Target

ed9d44aef86181fb313e9efa86501b23e740c4feb08cc8c86a6367e873c4cd8e
Size

141KB
MD5

0d463ddf5b9e12a2f619ff2cc404a030
SHA1

df935411ccfc571a6fd5761b50ff67a098343917
SHA256

ed9d44aef86181fb313e9efa86501b23e740c4feb08cc8c86a6367e873c4cd8e
SHA512

05ab13d918647c25d7d00ebb9a32530f73d2807307d5887baf55127a818962628dab264ab78f88df84135cb1c39af5f62c427ad696dcd2169a5627070f301429
SSDEEP

3072:HAXx836a5ITmeyGCMdH2AYUHQNNsqzYPUy3RM1:HcW3B5ULJd3/PUy3I

Score

N/A

Malware Config

Signatures

Files

ed9d44aef86181fb313e9efa86501b23e740c4feb08cc8c86a6367e873c4cd8e
.exe windows x86

cf6766625e6ee4033652861c94bf3cc2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCommMask
FindVolumeClose
ClearCommError
ReadFileScatter
DefineDosDeviceW
SetMailslotInfo
CloseHandle
GetAtomNameW
QueueUserAPC
SetFileApisToOEM
GetModuleFileNameA
GetProcessHandleCount
SetMessageWaitingIndicator
FlushFileBuffers
SetProcessShutdownParameters
AssignProcessToJobObject
MapUserPhysicalPagesScatter
RequestDeviceWakeup
RequestWakeupLatency
LockResource
GetProcessAffinityMask
RtlCaptureStackBackTrace
AreFileApisANSI
MapUserPhysicalPages
GetCommTimeouts
IsProcessInJob
CheckRemoteDebuggerPresent
CreateIoCompletionPort
QueryInformationJobObject
ReplaceFileA
GlobalUnfix
GetCommandLineA
GetVersionExA
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
GetProcAddress
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetLastError
GetCurrentThreadId
OutputDebugStringA
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA
Sleep
VirtualAlloc
HeapReAlloc
LoadLibraryExA
InitializeCriticalSection
RtlUnwind
VirtualProtect
GetSystemInfo
VirtualQuery

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cf6766625e6ee4033652861c94bf3cc2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 59KB - Virtual size: 58KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 68KB - Virtual size: 67KB

.text
Size: 59KB - Virtual size: 58KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 68KB - Virtual size: 67KB