c0c5666915bb71bfab98ae6a2effec916fb7e380be9ef039a3afeb68c233983c

Sharing

Copy URL Twitter E-mail

General

Target

c0c5666915bb71bfab98ae6a2effec916fb7e380be9ef039a3afeb68c233983c
Size

156KB
MD5

cf573cefd2fbd27d70d94f590246244a
SHA1

6f51dc69de8ceadb21ce6d6df42c5a5d0b7ee160
SHA256

c0c5666915bb71bfab98ae6a2effec916fb7e380be9ef039a3afeb68c233983c
SHA512

b173b29621ca21008c0c5d5b5fe26b4e36d6a93bf20231c1ee66701b20abf58b2007395565ad3fd5435e2a3bc0b7b534993981deca3ac6184511c54b9a5e8c20
SSDEEP

1536:Dh/OtZkMfyHlntyK7xarguUATfIYEJKUTZQtKh2hCkBgjXtFw34bEf57OHRuU3wJ:DhWUtfJRZQtJCkC4pWPkubq

Score

N/A

Malware Config

Signatures

Files

c0c5666915bb71bfab98ae6a2effec916fb7e380be9ef039a3afeb68c233983c
.exe windows x86

0fb5450509952968380348a07ca97ee1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cgishare

??6OutputStreamConverter@@QAEAAV0@PBD@Z
?freeResource@@YAXXZ
??6OutputStreamConverter@@QAEAAV0@H@Z
?getCharEncodingName@OutputStreamConverter@@SAPADW4CharEncoding@@@Z
??0OutputStreamConverter@@QAE@W4CharEncoding@@PAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
?loadResource@@YA_NXZ
?flush@OutputStreamConverter@@QAEAAV1@XZ

kernel32

Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
RaiseException
RtlUnwind
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
CloseHandle
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetLocaleInfoW
CreateFileA

Exports

Exports

??4OutputStreamConverter@@QAEAAV0@ABV0@@Z
??4UTFConverter@@QAEAAV0@ABV0@@Z
??4UTFDataFormatException@@QAEAAV0@ABV0@@Z
??6OutputStreamConverter@@QAEAAV0@P6AAAV0@AAV0@@Z@Z
?endl@@YAAAVOutputStreamConverter@@AAV1@@Z
?flush@@YAAAVOutputStreamConverter@@AAV1@@Z

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0fb5450509952968380348a07ca97ee1

Headers

File Characteristics

Imports

cgishare

kernel32

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 70KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 8KB - Virtual size: 14KB

.rsrc Size: 52KB - Virtual size: 52KB

.text
Size: 72KB - Virtual size: 70KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 8KB - Virtual size: 14KB

.rsrc
Size: 52KB - Virtual size: 52KB