fca4c1556235f1c6d607351b0d29f0b60c48121dc057687db2bad47c34c02f2e

Sharing

Copy URL

Twitter E-mail

General

Target

fca4c1556235f1c6d607351b0d29f0b60c48121dc057687db2bad47c34c02f2e
Size

79KB
MD5

58fd25534d6929d9b8b8f05e5f377bee
SHA1

15a69a8634192c26c0df92b5fb475aff9aad7a3f
SHA256

fca4c1556235f1c6d607351b0d29f0b60c48121dc057687db2bad47c34c02f2e
SHA512

4fd6d8a5137239daf42f2c58938152f0400f3ca95e2b2432e13bb636a7490dd2fc7a3c97f4d9693026579ee5edf27bce626f056ddebe4db2bf73b100f03663d6
SSDEEP

1536:p3aPz4TcV5C09M46W4hVB/VAzt+7zfzmDSf4+oKm+H32JafyE0ws0Y:p3aPz4TcVtMR+k7zf0+oKm43uaJNY

Score

N/A

Malware Config

Signatures

Files

fca4c1556235f1c6d607351b0d29f0b60c48121dc057687db2bad47c34c02f2e
.exe windows x86

3c55102a0a2639a3d4fe91f8c0c3be5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
GetConsoleOutputCP
WriteConsoleW
GetConsoleMode
GetFileType
GetStdHandle
FormatMessageW
LocalFree
FreeLibrary
LoadLibraryExW
ReadConsoleW
SetConsoleMode
HeapSize
GetFullPathNameW
HeapAlloc
InterlockedCompareExchange
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
InterlockedExchange
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
WriteFile
HeapFree
HeapSetInformation
GetLastError
GetProcessHeap
Sleep
SetThreadPreferredUILanguages

msvcrt

__wgetmainargs
_wsetlocale
__CxxFrameHandler3
_controlfp
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
??1type_info@@UAE@XZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
memset
_wcsicmp
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
?terminate@@YAXXZ
_callnewh
malloc
_CxxThrowException
memcpy
towupper
wcsncmp
free
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
??0exception@@QAE@XZ
_wtoi64
_vsnwprintf

oleaut32

VariantClear
VariantInit
SysStringByteLen
SysAllocString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
VariantCopy
SysFreeString
SysStringLen

ole32

CoSetProxyBlanket
CoCreateInstance
CoInitializeSecurity
CoInitializeEx

profapi

ord103

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3c55102a0a2639a3d4fe91f8c0c3be5b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

oleaut32

ole32

profapi

Sections

.text Size: 54KB - Virtual size: 53KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 21KB - Virtual size: 26KB

.text
Size: 54KB - Virtual size: 53KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 21KB - Virtual size: 26KB