9604df9c386821d79da008772802848ddbe4c064307b238760affd11df75b60e

Sharing

Copy URL Twitter E-mail

General

Target

9604df9c386821d79da008772802848ddbe4c064307b238760affd11df75b60e
Size

585KB
MD5

3af80ac49877d18f58cef6a2e9ebb8bb
SHA1

5f76a139a6dfbf92f8381e73fdf4d0b05b7b290b
SHA256

9604df9c386821d79da008772802848ddbe4c064307b238760affd11df75b60e
SHA512

81888beab2bbeafe24c875b083b4841800b698297680f797dbe006129206c956006b0e2452ae3dd31198bacd3a0a39ffba093087fd02524910b73e15267c2e92
SSDEEP

6144:mBtwu46x5WmLMPNfqzHWb8mgh5CoXsG5Ob2KmPMSgZGHWu4GEEQc7C:mvixmLeqzHfmeOG82/OZQjQcC

Score

N/A

Malware Config

Signatures

Files

9604df9c386821d79da008772802848ddbe4c064307b238760affd11df75b60e
.exe windows x64

a9a596a237e98dc6d3b3e70dfc581e35

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegQueryInfoKeyW
RegEnumValueW
CreateWellKnownSid
CheckTokenMembership

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
GetLastError
SetFilePointer
LoadLibraryW
GetProcAddress
FreeLibrary
HeapReAlloc
GetComputerNameW
HeapSetInformation
GetModuleHandleW
SetConsoleCtrlHandler
GetConsoleMode
GetStdHandle
SetConsoleMode
ReadConsoleW
MultiByteToWideChar
GetConsoleOutputCP
WriteFile
WideCharToMultiByte
FormatMessageW
LocalFree
OpenEventW
SetEvent
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterW
FillConsoleOutputAttribute
SetConsoleCursorPosition
CreateEventW
CreateConsoleScreenBuffer
SetConsoleScreenBufferSize
SetConsoleActiveScreenBuffer
WaitForSingleObject
ResetEvent
GetVersionExW
LoadLibraryExA
DelayLoadFailureHook
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
Sleep
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter

msvcrt

__wgetmainargs
__C_specific_handler
_XcptFilter
_exit
_cexit
exit
_initterm
_amsg_exit
fgets
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
fputwc
__setusermatherr
fflush
wcspbrk
_wcsnicmp
_iob
memcpy
wcstok
wcscpy_s
wcschr
free
wcsrchr
_wcsupr
_vsnwprintf
qsort
_wcsicmp
wprintf
fclose
_wfopen
iswctype
_wcslwr
_wcsdup
memset

credui

CredUIParseUserNameW

mpr

WNetAddConnection2W
WNetCancelConnection2W

ntdll

RtlGUIDFromString
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

ole32

CoSetProxyBlanket
CoUninitialize
CoInitializeEx
CoCreateInstance

oleaut32

SysAllocString
VariantChangeType
SysFreeString

user32

LoadStringW

Exports

Exports

ConvertGuidToString
ConvertStringToGuid
DisplayMessageM
DisplayMessageToConsole
FreeQuotedString
FreeString
GenericMonitor
GetEnumString
InitializeConsole
MakeQuotedString
MakeString
MatchCmdLine
MatchEnumTag
MatchTagsInCmdLine
MatchToken
PreprocessCommand
PrintError
PrintMessage
PrintMessageFromModule
ProcessCommand
RefreshConsole
RegisterContext
RegisterHelper

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vmp0
Size: 500KB - Virtual size: 1.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a9a596a237e98dc6d3b3e70dfc581e35

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

credui

mpr

ntdll

ole32

oleaut32

user32

Exports

Exports

Sections

.text Size: 46KB - Virtual size: 46KB

.data Size: 33KB - Virtual size: 60KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 436B

.vmp0 Size: 500KB - Virtual size: 1.8MB

.text
Size: 46KB - Virtual size: 46KB

.data
Size: 33KB - Virtual size: 60KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 436B

.vmp0
Size: 500KB - Virtual size: 1.8MB