Sofftware apdaaattt x64 x32 blt[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Sofftware apdaaattt x64 x32 blt.exe
Size

1.0MB
MD5

5626464b66d55a1d1054d774713ed3d2
SHA1

11cb3324ce60c045541bd1db25dd943d4a5fd11f
SHA256

1657c1b339990b41b61e53bce82ee43fdea10c9cfdc4820c8ab8de7efb7b5792
SHA512

dbbe2ec607e3b4bdb7ef05483c410bf3e4c40588acc7301a0a17a97ffbcbd046d80883a0b75208678762c99ae21380771b64f7f0c190c1f3dfea70e404dce273
SSDEEP

12288:jeD12u7YVn46S+Q6x4fOddti1ySgJlyDBJyo3G2:jhfn4wQ6x4wi1ySgJlWVP

Score

N/A

Malware Config

Signatures

Files

Sofftware apdaaattt x64 x32 blt.exe
.exe windows x86

50fac56420301590bb5c790f6fb6225c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
SetLastError
OutputDebugStringA
VirtualAlloc
lstrlenA
GetLastError
CloseHandle
HeapAlloc
GetProcAddress
Sleep
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
SetEvent
OutputDebugStringW
EncodePointer
GetThreadTimes
FreeLibrary
GetModuleFileNameW
LoadLibraryExW
RtlUnwind
RaiseException
GetModuleHandleExW
HeapValidate
GetSystemInfo
GetStdHandle
WriteFile
ExitProcess
LCMapStringW
GetFileType
SetFilePointerEx
HeapReAlloc
HeapSize
HeapQueryInformation
GetProcessHeap
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
WriteConsoleW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
DecodePointer
CreateFileW

Sections

.text
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

htr8345
Size: 194KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50fac56420301590bb5c790f6fb6225c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 193KB - Virtual size: 192KB

.rdata Size: 66KB - Virtual size: 65KB

.data Size: 3KB - Virtual size: 7KB

.gfids Size: 512B - Virtual size: 360B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 9KB - Virtual size: 8KB

htr8345 Size: 194KB - Virtual size: 196KB

.text
Size: 193KB - Virtual size: 192KB

.rdata
Size: 66KB - Virtual size: 65KB

.data
Size: 3KB - Virtual size: 7KB

.gfids
Size: 512B - Virtual size: 360B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 9KB - Virtual size: 8KB

htr8345
Size: 194KB - Virtual size: 196KB