86507a1310cb2f2258312c376850d17ba94c2aa26cfe6c86af2e7e3d1c94d3e7

Sharing

Copy URL Twitter E-mail

General

Target

86507a1310cb2f2258312c376850d17ba94c2aa26cfe6c86af2e7e3d1c94d3e7
Size

500KB
MD5

2464dc34168bf88b6d06bbdaf6bc94d0
SHA1

be5d3820d27656ae29c667495045c418cbc11c15
SHA256

86507a1310cb2f2258312c376850d17ba94c2aa26cfe6c86af2e7e3d1c94d3e7
SHA512

e2a4eb3373f181685aa23197d707e8491b82d6b4755098f3b3dff9c7b5bd5893321c542f6e7549b285a2675a3a122058368f2c7e4e4e8026cfc0c150e035c6e9
SSDEEP

12288:2edhKjQne2AG6aVi7JV8/efeRijqBqzItW:2efKjQnenaumefgTMa

Score

N/A

Malware Config

Signatures

Files

86507a1310cb2f2258312c376850d17ba94c2aa26cfe6c86af2e7e3d1c94d3e7
.exe windows x86

6aba08f1f52d2d19fb327cc3b6f6efb1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
GetLocalTime
VirtualFree
SetThreadPriority
GetModuleHandleW
GetProcAddress
GetLastError
GetTickCount
VirtualAlloc
CloseHandle
CreateFileA
LoadLibraryA
Sleep
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
IsBadWritePtr
IsBadReadPtr
HeapValidate
TerminateProcess
GetCurrentProcess
ExitProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
SetStdHandle
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
VirtualProtect
GetSystemInfo
VirtualQuery

user32

LoadBitmapA
SetFocus

gdi32

CreatePen

ole32

CoInitialize

ws2_32

select

winmm

mciSendCommandA
auxSetVolume

Exports

Exports

?SETCONFIG@@YAXXZ

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.INITV3
Size: 4KB - Virtual size: 45B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.EPV
Size: 4KB - Virtual size: 618B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xcode
Size: 372KB - Virtual size: 371KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6aba08f1f52d2d19fb327cc3b6f6efb1

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

ws2_32

winmm

Exports

Exports

Sections

.text Size: 68KB - Virtual size: 67KB

.INITV3 Size: 4KB - Virtual size: 45B

.EPV Size: 4KB - Virtual size: 618B

.xcode Size: 372KB - Virtual size: 371KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 8KB - Virtual size: 423KB

.rsrc Size: 20KB - Virtual size: 16KB

.text
Size: 68KB - Virtual size: 67KB

.INITV3
Size: 4KB - Virtual size: 45B

.EPV
Size: 4KB - Virtual size: 618B

.xcode
Size: 372KB - Virtual size: 371KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 8KB - Virtual size: 423KB

.rsrc
Size: 20KB - Virtual size: 16KB