da3418b0016bb7e279fa1b3b19946a7a266bc9d51cab3d19ee9a353d01ca8082

Sharing

Copy URL Twitter E-mail

General

Target

da3418b0016bb7e279fa1b3b19946a7a266bc9d51cab3d19ee9a353d01ca8082
Size

376KB
MD5

326b986de3b0230a45a94eaa697dc2a0
SHA1

163f3fe6bb1810d3378dc0644dbbf3e10866d7c2
SHA256

da3418b0016bb7e279fa1b3b19946a7a266bc9d51cab3d19ee9a353d01ca8082
SHA512

12c56f3c1874f2c225d18b662a69b9b6c6af4540ee2ed9215f3af34d29a9c1d00ffb39b02bae3adcab92f14b55c293a7cb3beb76acbc1f716c673b055ebe0213
SSDEEP

6144:swrqAeQyNU1mE67HdEA9IAPhe5GcbL5WAgwJnc3wD:nUbU1mE6Lq6IIFcbVpu3e

Score

N/A

Malware Config

Signatures

Files

da3418b0016bb7e279fa1b3b19946a7a266bc9d51cab3d19ee9a353d01ca8082
.exe windows x86

0f5396f26aec1cdea7b6e6963e90d1e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile
WriteFile
InitializeCriticalSection
DeleteCriticalSection
OutputDebugStringA
HeapAlloc
HeapFree
HeapCreate
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
GetLastError
GetCurrentProcessId
GetCurrentThreadId
GetFileTime
SetFileTime
GetComputerNameW
GetTickCount
FlushFileBuffers
CreateFileW
WriteConsoleW
SetStdHandle
HeapReAlloc
LoadLibraryW
GetConsoleMode
GetConsoleCP
IsProcessorFeaturePresent
QueryPerformanceCounter
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
ExitProcess
HeapSize
GetStringTypeW
GetModuleFileNameW
GetStdHandle
LCMapStringW
SetLastError
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
RtlUnwind
GetStartupInfoW
HeapSetInformation
SetFilePointer
lstrlenA
InterlockedDecrement
InterlockedIncrement
InterlockedCompareExchange
WaitForSingleObject
CreateSemaphoreA
GetModuleFileNameA
GetCurrentProcess
UnmapViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingA
ReadFile
Sleep
FindNextFileA
FindClose
GetWindowsDirectoryA
FindFirstFileA
GetSystemDirectoryA
GetComputerNameA
MultiByteToWideChar
CloseHandle
DeviceIoControl
CreateFileA
GetVersionExA
WideCharToMultiByte
GetACP
GetDriveTypeA
FreeLibrary
LoadLibraryA
GetVersion
GetModuleHandleA
TerminateProcess
GetProcAddress
GetCommandLineA
EncodePointer
DecodePointer
GetSystemTimeAsFileTime

user32

EnumDisplaySettingsA
wsprintfA
wsprintfW
GetKeyNameTextA
GetKeyboardLayout
MapVirtualKeyExA
SetCursor
LoadStringA
DispatchMessageA
TranslateMessage
GetMessageA
MapVirtualKeyA

advapi32

RegDeleteKeyA
RegEnumValueA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
GetUserNameA

ole32

CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

SysAllocString
SysFreeString
VariantClear
SysAllocStringLen
VariantInit

Sections

.text
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f5396f26aec1cdea7b6e6963e90d1e7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

Sections

.text Size: 204KB - Virtual size: 204KB

.rdata Size: 132KB - Virtual size: 132KB

.data Size: 16KB - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 16KB - Virtual size: 16KB

.text
Size: 204KB - Virtual size: 204KB

.rdata
Size: 132KB - Virtual size: 132KB

.data
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 16KB - Virtual size: 16KB