629386eb1ced7fd9fd4ad41325c53f667af45989d4825b93a5bf006311ae2f2d

Sharing

Copy URL Twitter E-mail

General

Target

629386eb1ced7fd9fd4ad41325c53f667af45989d4825b93a5bf006311ae2f2d
Size

99KB
MD5

3aa5519f2e3f9f3302617da5e0958cba
SHA1

c947486ef84773ff7f9ceb50a5888bc9c09644d0
SHA256

629386eb1ced7fd9fd4ad41325c53f667af45989d4825b93a5bf006311ae2f2d
SHA512

e0735cfbf0a4a945a52cf2e339696c9b78a55c15314eba5fe4f95a500cf299b9f547c415be28f61ba22a68a34e52da21bc50129b6b4beb9ba193e64a7eb05dbc
SSDEEP

1536:rVkbZTBOd+bAwXrQd77D/5AMidg/7auaYvn56RDSCH5csnV319Q1Q5Vl+0:reO+VdJl3Sy9QW5Vl+0

Score

N/A

Malware Config

Signatures

Files

629386eb1ced7fd9fd4ad41325c53f667af45989d4825b93a5bf006311ae2f2d
.exe windows x86

74dd02fa1fdd5f1a9ac31ca8e62babcc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileA

kernel32

GetCurrentProcess
Process32First
GetWindowsDirectoryA
OpenProcess
Sleep
CreateProcessA
TerminateProcess
GetLastError
lstrcmpiA
GetProcAddress
SetFileAttributesA
FreeLibrary
Process32Next
GetSystemInfo
GetModuleHandleA
CreateToolhelp32Snapshot
CloseHandle
GetModuleFileNameA
GetVersionExA
GetLocaleInfoA
GetPrivateProfileStringA
GetPrivateProfileIntA
SetEndOfFile
GetProcessHeap
LoadLibraryA
HeapAlloc
GetStringTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetFileAttributesA
CreateDirectoryA
DeleteFileA
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
SetStdHandle
GetFileType
SetFilePointer
SetHandleCount
GetStdHandle
DeleteCriticalSection
HeapSize
ExitProcess
MultiByteToWideChar
ReadFile
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CreateFileA
InitializeCriticalSectionAndSpinCount
VirtualAlloc
HeapReAlloc
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA

user32

WaitForInputIdle
wsprintfA

advapi32

CryptDestroyHash
CryptDecrypt
CheckTokenMembership
FreeSid
CryptCreateHash
AllocateAndInitializeSid
CryptAcquireContextA
CryptReleaseContext
GetTokenInformation
CryptDeriveKey
OpenProcessToken
CryptHashData

shell32

ShellExecuteExA
ShellExecuteA

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74dd02fa1fdd5f1a9ac31ca8e62babcc

Headers

DLL Characteristics

File Characteristics

Imports

urlmon

kernel32

user32

advapi32

shell32

Sections

.text Size: 71KB - Virtual size: 70KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 12KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 71KB - Virtual size: 70KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 12KB

.reloc
Size: 7KB - Virtual size: 7KB