616cd0a83297a36a29f7d3182a0bfcc9a79b5adf4516ccea24daf8afa1133c0f

Sharing

Copy URL Twitter E-mail

General

Target

616cd0a83297a36a29f7d3182a0bfcc9a79b5adf4516ccea24daf8afa1133c0f
Size

223KB
MD5

2de9a1ae5a628362f7b9e5f3dd857e68
SHA1

95ce7449326ad25b37525705e209aec436f812fd
SHA256

616cd0a83297a36a29f7d3182a0bfcc9a79b5adf4516ccea24daf8afa1133c0f
SHA512

7eb4fc1a00a5e11daed64c117e1fbe03397ef40be2b25aa546ceb7d2365538ea803c0a9dfc71995f8b45574264c228a08909a854cb83aa2c55578b3daec6e3cd
SSDEEP

6144:9S9/4QEb3wvf8R1T9PwZv46cZG1yFbGy:9St4/LweTPwoI1

Score

N/A

Malware Config

Signatures

Files

616cd0a83297a36a29f7d3182a0bfcc9a79b5adf4516ccea24daf8afa1133c0f
.exe windows x86

5607ee32a239a4c1df03b47c619b2273

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

GetModuleFileNameW
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
RtlUnwind
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
CreateMutexW
GetLastError
GetCurrentProcess
CloseHandle
UnhandledExceptionFilter

msvcrt

__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
wcsrchr
_wcsicmp

difxapi

DriverPackageUninstallW
DriverPackagePreinstallW
DriverPackageInstallW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 151KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pxuunsb
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

scptezt
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ezypzak
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5607ee32a239a4c1df03b47c619b2273

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

difxapi

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text Size: 151KB - Virtual size: 152KB

pxuunsb Size: 30KB - Virtual size: 32KB

scptezt Size: 31KB - Virtual size: 32KB

ezypzak Size: - Virtual size: 4KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 151KB - Virtual size: 152KB

pxuunsb
Size: 30KB - Virtual size: 32KB

scptezt
Size: 31KB - Virtual size: 32KB

ezypzak
Size: - Virtual size: 4KB