ff4b8dceee24a20dcb4bb4cd29558dc76d26f5a341090cbfcacef1be5070b27f

Sharing

Copy URL

Twitter E-mail

General

Target

ff4b8dceee24a20dcb4bb4cd29558dc76d26f5a341090cbfcacef1be5070b27f
Size

103KB
MD5

8c096bcfb821b02e623d3362d72535b9
SHA1

58c2e658b7d9e69d679b0d501476f7af1823abda
SHA256

ff4b8dceee24a20dcb4bb4cd29558dc76d26f5a341090cbfcacef1be5070b27f
SHA512

8f4f990c670e0d2c26b72576eb7e2eebd46b0b38dffe8abec19c0146dafc0cfd41dc049a98741cbcda95cc44f39364ae723a827cf7f31eb839a9a255ccb55c4d
SSDEEP

1536:/e8pnzsLgV8Y0ggmUQMe20mjb0GN/tFAb9EDzBOn7fODE4k5uoma:mcYgVmEu0ugrO4B5uo

Score

N/A

Malware Config

Signatures

Files

ff4b8dceee24a20dcb4bb4cd29558dc76d26f5a341090cbfcacef1be5070b27f
.exe windows x86

9d0f2f351fcf216ff58cc5831d5b2e05

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileA

kernel32

GetLastError
GetSystemInfo
GetModuleHandleA
CloseHandle
GetCurrentProcess
Sleep
Process32Next
lstrcmpiA
OpenProcess
TerminateProcess
Process32First
CreateToolhelp32Snapshot
LoadLibraryA
SetFileAttributesA
GetWindowsDirectoryA
CreateProcessA
GetModuleFileNameA
WriteConsoleW
GetConsoleOutputCP
GetProcAddress
FreeLibrary
GetPrivateProfileStringA
GetPrivateProfileIntA
SetEndOfFile
GetProcessHeap
GetVersionExA
GetCommandLineA
WriteConsoleA
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
CreateDirectoryA
GetFileAttributesA
DeleteFileA
GetStartupInfoA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapFree
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
WriteFile
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
HeapSize
ExitProcess
ReadFile
SetStdHandle
GetFileType
SetFilePointer
SetHandleCount
GetStdHandle
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
FlushFileBuffers
CreateFileA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA

user32

WaitForInputIdle
wsprintfA

advapi32

CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDecrypt
CryptDestroyHash
CryptReleaseContext
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
OpenProcessToken
GetTokenInformation

shell32

ShellExecuteExA
ShellExecuteA

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9d0f2f351fcf216ff58cc5831d5b2e05

Headers

DLL Characteristics

File Characteristics

Imports

urlmon

kernel32

user32

advapi32

shell32

Sections

.text Size: 74KB - Virtual size: 74KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 5KB - Virtual size: 13KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 74KB - Virtual size: 74KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 5KB - Virtual size: 13KB

.reloc
Size: 7KB - Virtual size: 7KB