b6afd0ebe23c531c91f05dd207d0aa78211be3ee38c990bf87ae6b53ffaff3d3

Sharing

Copy URL Twitter E-mail

General

Target

b6afd0ebe23c531c91f05dd207d0aa78211be3ee38c990bf87ae6b53ffaff3d3
Size

99KB
MD5

8b1a0f225771cddc998423dc04790701
SHA1

5dc1665fa4a45489a97b270e3e02a72c60b277ae
SHA256

b6afd0ebe23c531c91f05dd207d0aa78211be3ee38c990bf87ae6b53ffaff3d3
SHA512

13155fadce5bdbe988e5641237ee62bbd4089c2c42798c023ffbef98b01daf3d2c81219a3ebc9845bbded45e2463c2112a64ced9b9780e45f353e2adf92b3c3d
SSDEEP

1536:gVkbZTBOd+bAwXrQd77D/5AMidg/7auaYvn56RDSCH5csnV319QrQ5Vl+0:geO+VdJl3Sy9QE5Vl+0

Score

N/A

Malware Config

Signatures

Files

b6afd0ebe23c531c91f05dd207d0aa78211be3ee38c990bf87ae6b53ffaff3d3
.exe windows x86

74dd02fa1fdd5f1a9ac31ca8e62babcc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileA

kernel32

GetCurrentProcess
Process32First
GetWindowsDirectoryA
OpenProcess
Sleep
CreateProcessA
TerminateProcess
GetLastError
lstrcmpiA
GetProcAddress
SetFileAttributesA
FreeLibrary
Process32Next
GetSystemInfo
GetModuleHandleA
CreateToolhelp32Snapshot
CloseHandle
GetModuleFileNameA
GetVersionExA
GetLocaleInfoA
GetPrivateProfileStringA
GetPrivateProfileIntA
SetEndOfFile
GetProcessHeap
LoadLibraryA
HeapAlloc
GetStringTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetFileAttributesA
CreateDirectoryA
DeleteFileA
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
SetStdHandle
GetFileType
SetFilePointer
SetHandleCount
GetStdHandle
DeleteCriticalSection
HeapSize
ExitProcess
MultiByteToWideChar
ReadFile
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CreateFileA
InitializeCriticalSectionAndSpinCount
VirtualAlloc
HeapReAlloc
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA

user32

WaitForInputIdle
wsprintfA

advapi32

CryptDestroyHash
CryptDecrypt
CheckTokenMembership
FreeSid
CryptCreateHash
AllocateAndInitializeSid
CryptAcquireContextA
CryptReleaseContext
GetTokenInformation
CryptDeriveKey
OpenProcessToken
CryptHashData

shell32

ShellExecuteExA
ShellExecuteA

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74dd02fa1fdd5f1a9ac31ca8e62babcc

Headers

DLL Characteristics

File Characteristics

Imports

urlmon

kernel32

user32

advapi32

shell32

Sections

.text Size: 71KB - Virtual size: 70KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 12KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 71KB - Virtual size: 70KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 12KB

.reloc
Size: 7KB - Virtual size: 7KB