d363f2fa87dfa28f17b1d708694d8eb24e4910c33558b8aca65a873f84667b76

Sharing

Copy URL Twitter E-mail

General

Target

d363f2fa87dfa28f17b1d708694d8eb24e4910c33558b8aca65a873f84667b76
Size

591KB
MD5

c739fcddcde3896c3f41be7bce86d7e5
SHA1

a3a6fc8b43ff3eec62a288978b8945f8c3e97581
SHA256

d363f2fa87dfa28f17b1d708694d8eb24e4910c33558b8aca65a873f84667b76
SHA512

cba2ed169ad1b496cacbe68e2b3c8fc8c64bd962a8167ed2083babc1c092ee47022b1b18050e8b722f72394479ca488ebd15c347d1b28c02754e4e48c5bd2734
SSDEEP

12288:MlfwlV7TaSKECWmRuPGJr47c2oP2AFGG:cwoEC/LP22

Score

N/A

Malware Config

Signatures

Files

d363f2fa87dfa28f17b1d708694d8eb24e4910c33558b8aca65a873f84667b76
.exe windows x86

5866c7495bfdbfc20b1a69532ffd41bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BeginUpdateResourceA
EndUpdateResourceA
UpdateResourceA
DeleteFileA
GetTickCount
lstrcpynA
WriteFile
CreateFileA
GetStdHandle
CloseHandle
ReadConsoleInputA
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
IsDebuggerPresent
EncodePointer
DecodePointer
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
GetProcessHeap
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetModuleFileNameW
SetLastError
InterlockedIncrement
GetCurrentThreadId
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
Sleep
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
GetStringTypeW
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapReAlloc
ReadFile
ReadConsoleW
SetFilePointerEx
HeapSize
LCMapStringW
SetStdHandle
WriteConsoleW
CreateFileW

comdlg32

GetSaveFileNameA

advapi32

CryptAcquireContextA
CryptGenRandom

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 504KB - Virtual size: 511KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5866c7495bfdbfc20b1a69532ffd41bb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comdlg32

advapi32

Sections

.text Size: 55KB - Virtual size: 54KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 504KB - Virtual size: 511KB

.reloc Size: 11KB - Virtual size: 10KB

.text
Size: 55KB - Virtual size: 54KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 504KB - Virtual size: 511KB

.reloc
Size: 11KB - Virtual size: 10KB