63bbdcdea55910ee3a9481ac60cc982aa21c81acf667b311f4311182790a7d70

Sharing

Copy URL

Twitter E-mail

General

Target

63bbdcdea55910ee3a9481ac60cc982aa21c81acf667b311f4311182790a7d70
Size

51KB
MD5

c9842d04d586303ca5eff583255f80d7
SHA1

1ae897992b8577e3a166a8cec3d7453c32c6bb9c
SHA256

63bbdcdea55910ee3a9481ac60cc982aa21c81acf667b311f4311182790a7d70
SHA512

c6ba25e707974c734e16a2c10e0b2931889e3a16f88c0a339477c619a5dd279d878979c018e8aa84f4593d28cb7f09f6b6a23d095fef01e0eee759ce0de566be
SSDEEP

768:1qZmL3eycMrzuxGKPKplfCJn3NMAP6a6zT9ksChZnScvHXHM9q55U5M0Ln0O1FJZ:0myycsH9AP6NzpkpZt/3M9/Rtcxxo

Score

N/A

Malware Config

Signatures

Files

63bbdcdea55910ee3a9481ac60cc982aa21c81acf667b311f4311182790a7d70
.exe windows x86

6cd0850919ac467dc535c80c08d0821f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msdart

??4CReaderWriterLock@@QAEAAV0@ABV0@@Z
?IsWriteUnlocked@CLKRLinearHashTable@@QBE_NXZ
?SetDefaultSpinAdjustmentFactor@CCritSec@@SGXN@Z
?ConvertExclusiveToShared@CCritSec@@QAEXXZ
?IsReadLocked@CCritSec@@QBE_NXZ
??1CFakeLock@@QAE@XZ
?sm_dblDfltSpinAdjFctr@CFakeLock@@1NA
?_TryReadLockRecursive@CReaderWriterLock3@@AAE_NXZ
??0CReaderWriterLock2@@QAE@XZ
?ConvertExclusiveToShared@CFakeLock@@QAEXXZ
?SetDefaultSpinCount@CReaderWriterLock@@SGXG@Z
?GetDefaultSpinCount@CReaderWriterLock@@SGGXZ
?WriteUnlock@CLKRHashTable@@QBEXXZ
??4CReaderWriterLock3@@QAEAAV0@ABV0@@Z
?_DeleteRecord@CLKRLinearHashTable@@AAE?AW4LK_RETCODE@@PBXK@Z
?_IsLocked@CSpinLock@@ABE_NXZ
?WriteLock@CLKRLinearHashTable@@QAEXXZ
?sm_dblDfltSpinAdjFctr@CReaderWriterLock3@@1NA
?sm_pfnTryEnterCriticalSection@CCriticalSection@@0P6GHPAU_RTL_CRITICAL_SECTION@@@ZA
?SetDefaultSpinCount@CSmallSpinLock@@SGXG@Z

ntdll

RtlGetFullPathName_U
NtRequestWaitReplyPort
RtlDeleteNoSplay
NtOpenProcessToken
RtlEnlargedUnsignedDivide
ZwSetBootEntryOrder
PfxRemovePrefix
ZwDuplicateObject
RtlSetSecurityObjectEx
RtlConvertLongToLargeInteger
RtlGetGroupSecurityDescriptor
NtInitializeRegistry
ZwQueryIntervalProfile
ZwMakeTemporaryObject
RtlFirstFreeAce
sscanf
RtlCopyLuidAndAttributesArray
RtlCopySidAndAttributesArray
ZwAddAtom
ZwNotifyChangeDirectoryFile
RtlMakeSelfRelativeSD
RtlAppendUnicodeToString
RtlRunEncodeUnicodeString
NtTerminateProcess
ZwQuerySecurityObject
RtlAreBitsSet
RtlLookupElementGenericTable
CsrClientConnectToServer
RtlQueryTimeZoneInformation

kernel32

GetSystemTimeAsFileTime
OpenEventW
LoadLibraryA
IsValidLocale
SetConsoleMaximumWindowSize
GlobalAlloc
SetConsoleCtrlHandler
CompareFileTime
GetACP
GetQueuedCompletionStatus

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6cd0850919ac467dc535c80c08d0821f

Headers

DLL Characteristics

File Characteristics

Imports

msdart

ntdll

kernel32

Sections

.text Size: 40KB - Virtual size: 40KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 36KB

.text
Size: 40KB - Virtual size: 40KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 36KB