f792ec1e3f84c0a2fd60ab4f34067c5382070c15eedcc3488b268b61b57e21aa

Sharing

Copy URL Twitter E-mail

General

Target

f792ec1e3f84c0a2fd60ab4f34067c5382070c15eedcc3488b268b61b57e21aa
Size

3.8MB
MD5

608a8527c9ebd0ec1a10bfb3871c7dca
SHA1

61f6245816276a849471840b868ca4f06752a629
SHA256

f792ec1e3f84c0a2fd60ab4f34067c5382070c15eedcc3488b268b61b57e21aa
SHA512

a9ca763252b3ff5dc977bedc61d3e1a4210bd3c834c89a6952f5171cddaecddebdf500d92506753eca84e1572fe561e8f1f5bd866ea050e8f1d313e98a74baf2
SSDEEP

98304:VawYGgH2o7vx+L43NDwanM4OCk3rR0WLLa:xLzojxZRGlLLLa

Score

N/A

Malware Config

Signatures

Files

f792ec1e3f84c0a2fd60ab4f34067c5382070c15eedcc3488b268b61b57e21aa
.exe windows x64

8f57ef70c45ef30a8121d5204a087d85

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetSystemDirectoryA
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

OpenClipboard

advapi32

RegCloseKey

shell32

ShellExecuteA

Sections

.text
Size: - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Q)(GGN%G
Size: - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

$)ASNCL&
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VK*AUCTS
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Z_(H%KFZ
Size: - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fasbxzz
Size: - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

NW()PAZV
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_J#*XS(B
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

FTE&%&_S
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fasbxzz
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.fasbxzz
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fasbxzz
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f57ef70c45ef30a8121d5204a087d85

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: - Virtual size: 332KB

Q)(GGN%G Size: - Virtual size: 114KB

$)ASNCL& Size: - Virtual size: 15KB

VK*AUCTS Size: - Virtual size: 12KB

Z_(H%KFZ Size: - Virtual size: 244B

.fasbxzz Size: - Virtual size: 480B

NW()PAZV Size: - Virtual size: 2KB

_J#*XS(B Size: - Virtual size: 28KB

FTE&%&_S Size: - Virtual size: 5KB

.fasbxzz Size: - Virtual size: 1.7MB

.fasbxzz Size: 2KB - Virtual size: 1KB

.fasbxzz Size: 3.8MB - Virtual size: 3.8MB

.reloc Size: 512B - Virtual size: 180B

.rsrc Size: 512B - Virtual size: 469B

.text
Size: - Virtual size: 332KB

Q)(GGN%G
Size: - Virtual size: 114KB

$)ASNCL&
Size: - Virtual size: 15KB

VK*AUCTS
Size: - Virtual size: 12KB

Z_(H%KFZ
Size: - Virtual size: 244B

.fasbxzz
Size: - Virtual size: 480B

NW()PAZV
Size: - Virtual size: 2KB

_J#*XS(B
Size: - Virtual size: 28KB

FTE&%&_S
Size: - Virtual size: 5KB

.fasbxzz
Size: - Virtual size: 1.7MB

.fasbxzz
Size: 2KB - Virtual size: 1KB

.fasbxzz
Size: 3.8MB - Virtual size: 3.8MB

.reloc
Size: 512B - Virtual size: 180B

.rsrc
Size: 512B - Virtual size: 469B