ac86eb1f3eb220fd836d33bb152f5cd42f00b4ae885705712ab7c7a9b9f7da69

Sharing

Copy URL Twitter E-mail

General

Target

ac86eb1f3eb220fd836d33bb152f5cd42f00b4ae885705712ab7c7a9b9f7da69
Size

496KB
MD5

b40fdea523cf8f745698e2dc8f64a691
SHA1

753f11aa22af15c6fe61eb2f9d94c799e831842e
SHA256

ac86eb1f3eb220fd836d33bb152f5cd42f00b4ae885705712ab7c7a9b9f7da69
SHA512

4ac1c72843247d4c2ae2fa361264300a6862b44373565e874b6d88616741bcefc96d918139b27da5e3ea6e4d492f45e374578c789fce24584f266388db96d39a
SSDEEP

12288:YOSGig1PKjDC/P+up/tcdA5VaIaeLTjMFgqP+85nnidy:YOSGig1PAC/Pdue5VJXI5P+8n

Score

N/A

Malware Config

Signatures

Files

ac86eb1f3eb220fd836d33bb152f5cd42f00b4ae885705712ab7c7a9b9f7da69
.exe windows x86

4b2d7f0791df0718e9ce7419c138ec23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapValidate
IsBadReadPtr
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
RaiseException
DebugBreak
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
GetProcAddress
LoadLibraryA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
GetCurrentThread
RtlUnwind
CloseHandle
FatalAppExitA
GetModuleFileNameA
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
ExitProcess
GetACP
GetOEMCP
GetCPInfo
WriteFile
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointer
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
InitializeCriticalSection
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
SetConsoleCtrlHandler
LoadLibraryW
VirtualQuery
FreeLibrary
CreateFileA
SetStdHandle
FlushFileBuffers
InterlockedExchange
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetLocaleInfoA
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
WriteConsoleA
GetConsoleOutputCP
SetEndOfFile
GetLocaleInfoW
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
ReadConsoleInputA
SetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents

Sections

.textbss
Size: - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 404KB - Virtual size: 403KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4b2d7f0791df0718e9ce7419c138ec23

Headers

File Characteristics

Imports

kernel32

Sections

.textbss Size: - Virtual size: 193KB

.text Size: 404KB - Virtual size: 403KB

.rdata Size: 72KB - Virtual size: 69KB

.data Size: 8KB - Virtual size: 26KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 806B

.textbss
Size: - Virtual size: 193KB

.text
Size: 404KB - Virtual size: 403KB

.rdata
Size: 72KB - Virtual size: 69KB

.data
Size: 8KB - Virtual size: 26KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 806B