fe913bf434c44a1ffbd14c7994b4d631ed6a0786f548f522e656cd1af8f907cf

Sharing

Copy URL Twitter E-mail

General

Target

fe913bf434c44a1ffbd14c7994b4d631ed6a0786f548f522e656cd1af8f907cf
Size

160KB
MD5

f18ce43975381691de04acabe5919774
SHA1

aa603aa1edf551926b97fa520ca083238db0147d
SHA256

fe913bf434c44a1ffbd14c7994b4d631ed6a0786f548f522e656cd1af8f907cf
SHA512

df8f5b7b9e2f2f8b8d9f82a4cd000d109de7a295902d3cfe1829d7710b6f128977c3b0692dcb5a30c243f2f9fafc020458e48414ae94f225abdec29581a343a8
SSDEEP

3072:5VC/GVSYffjYZh0pMiljjeDBvoSJa1fhCQY1jF6pjmY:NVSSLYZ0MihMUp

Score

N/A

Malware Config

Signatures

Files

fe913bf434c44a1ffbd14c7994b4d631ed6a0786f548f522e656cd1af8f907cf
.exe windows x86

1a7d5a315c76cdfb8f04c06b7b823ae3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetNamedSecurityInfoW

kernel32

GetEnvironmentStrings
GetEnvironmentStringsW
GetCommandLineW
GetModuleHandleW
lstrcmpA
VirtualAlloc
GetVersionExA
CreateEventA
HeapCreate
LoadLibraryW
FreeLibrary
SetEndOfFile
WriteFile
FindFirstFileW
CreateFileA
HeapFree
SetHandleCount
GetModuleFileNameA
GetProcessVersion
GetCurrentThread
CreateSemaphoreA
GetStdHandle
GetTickCount
GetCommandLineA
GetPriorityClass
GetCurrentProcessId
CompareStringW
CompareStringA
RtlUnwind
GetStartupInfoA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
GetCurrentThreadId
SetUnhandledExceptionFilter
GetModuleHandleA
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetFileType
DeleteCriticalSection
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
Sleep
OutputDebugStringA
SetConsoleCtrlHandler
InterlockedExchange
LoadLibraryExA
InitializeCriticalSection
HeapAlloc
HeapReAlloc
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetLocaleInfoW
GetTimeZoneInformation
VirtualProtect
GetSystemInfo
VirtualQuery
SetEnvironmentVariableA

winscard

SCardFreeMemory

Sections

.text
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1a7d5a315c76cdfb8f04c06b7b823ae3

Headers

File Characteristics

Imports

advapi32

kernel32

winscard

Sections

.text Size: 96KB - Virtual size: 94KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 40KB - Virtual size: 40KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 96KB - Virtual size: 94KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 40KB - Virtual size: 40KB

.rsrc
Size: 4KB - Virtual size: 3KB