a1476549a76f7fea7615e83e59219c746af9660d038455bce4b6f803c9914fc9

Sharing

Copy URL Twitter E-mail

General

Target

a1476549a76f7fea7615e83e59219c746af9660d038455bce4b6f803c9914fc9
Size

152KB
MD5

8f368a422ee5d9e28aada1eed8f7a9af
SHA1

3461c0acfa8ceb99a3ebcfd96c7bca6b82c9ef73
SHA256

a1476549a76f7fea7615e83e59219c746af9660d038455bce4b6f803c9914fc9
SHA512

fdffe9cf4e90d02140cc12788e777d2f6c1ab029f521811487e7a1574c4107adefe5ab5360adfd2dc5a03c6e4de6c7c9f569c9a1181dbe0a00b8a7551c39f276
SSDEEP

3072:8KKVppkyG1SiYCXDUkId4eKKduB7bPhkNWx12Up8Wm34p+:86yGgifITHIBH5kE609m34p

Score

N/A

Malware Config

Signatures

Files

a1476549a76f7fea7615e83e59219c746af9660d038455bce4b6f803c9914fc9
.dll windows x64

02dcf0858da45830a2345ba5816c07cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

IsBadWritePtr
GetFileType
GetEnvironmentStrings
HeapDestroy
MultiByteToWideChar
FreeEnvironmentStringsW
RtlUnwind
UnmapViewOfFile
GetTickCount
WideCharToMultiByte
GetSystemTimeAsFileTime
GetCurrentProcessId
ReleaseMutex
SetEvent
OpenProcess
GetACP
CreateNamedPipeA
GetEnvironmentStringsW
GetStartupInfoA
UnhandledExceptionFilter
CreateEventA
SetUnhandledExceptionFilter
VirtualQuery
GetModuleHandleA
WriteFile
GetOEMCP
VirtualProtect
CreateTimerQueueTimer
IsBadCodePtr
lstrcpyW
GetLastError
LoadLibraryA
GetLocaleInfoA
EnterCriticalSection
GetStdHandle
DuplicateHandle
CreateThread
WaitForSingleObject
DeleteCriticalSection
GetSystemInfo
HeapFree
lstrcatW
ResetEvent
InitializeCriticalSection
GetVersionExA
IsBadReadPtr
LCMapStringA
HeapAlloc
Sleep
WaitForMultipleObjects
ConnectNamedPipe
GetCurrentThreadId
SetLastError
LeaveCriticalSection
FreeEnvironmentStringsA
QueryPerformanceCounter
DisconnectNamedPipe
TerminateProcess
DeleteTimerQueueTimer
CreateMutexW
GetModuleFileNameA
GetCPInfo
LCMapStringW

user32

CreateIconFromResource
DrawIcon
wsprintfW

advapi32

SetSecurityDescriptorDacl
IsValidAcl
InitializeSecurityDescriptor

msvcrt

exit
wcstok
free
scanf
swprintf
isdigit
wcschr
memmove
malloc
wcsncmp
fgetws
wcscat
fprintf
realloc
wcslen
wcscpy
memcpy
calloc
wprintf
strtok
wcstod
printf
wcscmp
_ltow
wcsstr
wcstol
towupper
memset
_strnicmp
vwprintf
fflush
_wcsnset
_wtoi
_stricmp

Exports

Exports

rnncdgcku

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xdata
Size: 4KB - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02dcf0858da45830a2345ba5816c07cb

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 100KB - Virtual size: 99KB

.data Size: 36KB - Virtual size: 62KB

xdata Size: 4KB - Virtual size: 552B

.rsrc Size: 8KB - Virtual size: 6KB

.text
Size: 100KB - Virtual size: 99KB

.data
Size: 36KB - Virtual size: 62KB

xdata
Size: 4KB - Virtual size: 552B

.rsrc
Size: 8KB - Virtual size: 6KB