0da6fbb3f9b2074881d280048a70c3f390aef88d6aafcfdee50a29caf0aef6d4

Sharing

Copy URL Twitter E-mail

General

Target

0da6fbb3f9b2074881d280048a70c3f390aef88d6aafcfdee50a29caf0aef6d4
Size

13KB
MD5

e8283af4e98903470b391f24c01aba03
SHA1

2ddeb77ba774ff23f15fc307c0dd236d5397f256
SHA256

0da6fbb3f9b2074881d280048a70c3f390aef88d6aafcfdee50a29caf0aef6d4
SHA512

75f2b3eb7c67a8f2d5dafaeefc936fbc00ce983279117248fdf7dbf3b8722983eb292b22e41a5ef347a851ed3b5256b97010d07fcfaf523b938d93c68372a27b
SSDEEP

192:smZtmO/ofbpy0URpkoATOcVPZnwUplJpTkrFVoNK0LMeK+KIpSmgWsBUeTW/:3mzb80Ho8F3plj0LoH4exVfgWYhTW/

Score

N/A

Malware Config

Signatures

Files

0da6fbb3f9b2074881d280048a70c3f390aef88d6aafcfdee50a29caf0aef6d4
.exe windows x64

55eac22bec69292daeec7a3befe0c3d8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

HeapSetInformation
LocalFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
Sleep
TerminateProcess
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
GetCurrentProcess

user32

GetDesktopWindow
RegisterClassExW
SetForegroundWindow
CreateWindowExW
GetSystemMetrics
DefWindowProcW

msvcrt

?terminate@@YAXXZ
__set_app_type
_fmode
__wgetmainargs
_amsg_exit
_XcptFilter
_wtoi
_wcmdln
__C_specific_handler
_initterm
__setusermatherr
_cexit
_exit
exit
_commode
memset

apphelp

ApphelpDebugPrintf

shell32

CommandLineToArgvW

ntdll

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

pcaui

PcaLaunchApplicationWithConsent
PcaPersistSettingsAndLaunchApplication

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55eac22bec69292daeec7a3befe0c3d8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcrt

apphelp

shell32

ntdll

pcaui

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 240B

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 104B

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 240B

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 104B