45d1e505d89f99f66b88d607c7707db6a582776a4139d4e75da91e2a723a3066

Sharing

Copy URL

Twitter E-mail

General

Target

45d1e505d89f99f66b88d607c7707db6a582776a4139d4e75da91e2a723a3066
Size

621KB
MD5

35592af540e4774e050b2ced71dca420
SHA1

fb1912576908f32a58090df917d31676dfd74982
SHA256

45d1e505d89f99f66b88d607c7707db6a582776a4139d4e75da91e2a723a3066
SHA512

007f4cb23eca0c0acb3176d701f2fac5f37a7ac5a7a2f723ccc23e8826ba470da406808378315072ccc9beb61957aa883c624c5b7d463780446a0a9f463ae037
SSDEEP

12288:NlpuuB7McEHMZvYazNfybF1oSEmT1Q+GDIUF8eFghHG0LX6F337:NlpuurVRtaZBpQlIUFFg1G0LXk7

Score

N/A

Malware Config

Signatures

Files

45d1e505d89f99f66b88d607c7707db6a582776a4139d4e75da91e2a723a3066
.exe windows x64

58a3a58f91cdeb178035f33d270806ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

aclog

aclogLog

kernel32

CloseHandle
CreateProcessA
GetLastError
TlsFree
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
HeapSetInformation
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RtlUnwindEx
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapReAlloc
RtlVirtualUnwind
RtlLookupFunctionEntry

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 576KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

58a3a58f91cdeb178035f33d270806ed

Headers

DLL Characteristics

File Characteristics

Imports

aclog

kernel32

advapi32

Sections

.text Size: 27KB - Virtual size: 27KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 8KB

.pdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 576KB - Virtual size: 1.9MB

.text
Size: 27KB - Virtual size: 27KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 8KB

.pdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 576KB - Virtual size: 1.9MB