da495fe5b4fdd1f8e9f3d56bfc716cc888bd7d1eeeb141eec1f37a9932d1e54e

Sharing

Copy URL

Twitter E-mail

General

Target

da495fe5b4fdd1f8e9f3d56bfc716cc888bd7d1eeeb141eec1f37a9932d1e54e
Size

3.6MB
MD5

1968b72bd158f86b2f6dbeeaaf7cfe0e
SHA1

bd6b9a30f47cd1c96dc2b0245ff340daac8f9b01
SHA256

da495fe5b4fdd1f8e9f3d56bfc716cc888bd7d1eeeb141eec1f37a9932d1e54e
SHA512

7e7bdcbbbb9f4520227eef7876a3174d68ce8b3362a810d96bb5a6066e56bafe3d41c94237824616b0ea1e037f4b407bf73fc249c8b03a6ccf6a72a24687e402
SSDEEP

49152:FbAct+TfLFAsAp0Xw2VnzmhK6Dhtc0LKXnss6MogyE3837l0WN0kzXJAhkCWLxlU:Fbr+TSjp0Xx8E4GXneYy4837lRjJLCo

Score

N/A

Malware Config

Signatures

Files

da495fe5b4fdd1f8e9f3d56bfc716cc888bd7d1eeeb141eec1f37a9932d1e54e
.exe windows x86

ad30ffeb924f406381cbbac744b4a392

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
CloseHandle
Sleep
WriteFile
DeleteFileA
RemoveDirectoryA
GetProcAddress
LoadLibraryA
GetTempPathA
GetFileAttributesA
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
GetTempFileNameA
GetModuleFileNameW
GetProcessId
AddVectoredExceptionHandler
TerminateProcess
GetLocalTime
GetTickCount
GetProcessHeap
HeapAlloc
HeapFree
CreateMutexA
GetModuleHandleExW
InitializeCriticalSection
InterlockedCompareExchange
SetUnhandledExceptionFilter
GetCurrentDirectoryW
SetCurrentDirectoryW
GetCurrentThreadId
ExitProcess
DeleteCriticalSection
TerminateThread
EnterCriticalSection
OpenThread
LeaveCriticalSection
VirtualAlloc
VirtualFree
ReadFile
CreateFileW
SystemTimeToFileTime
GetLastError
WriteConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
SetEndOfFile
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
RaiseException
GetStdHandle
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LoadLibraryExW
HeapReAlloc
GetStringTypeW

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

user32

SetFocus
ShowWindow
PostMessageA
MessageBoxA
PeekMessageA
DispatchMessageA
TranslateMessage
PostMessageW
DispatchMessageW
MessageBoxW

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad30ffeb924f406381cbbac744b4a392

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 2.0MB - Virtual size: 2.0MB

.data Size: 69KB - Virtual size: 80KB

.rsrc Size: 1024B - Virtual size: 984B

.reloc Size: 33KB - Virtual size: 32KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 2.0MB - Virtual size: 2.0MB

.data
Size: 69KB - Virtual size: 80KB

.rsrc
Size: 1024B - Virtual size: 984B

.reloc
Size: 33KB - Virtual size: 32KB