91bcad3fd96b492c3d8ca7657b56f5830e0c66c46dc05d0fb4c1f15c81f83bb7

Sharing

Copy URL Twitter E-mail

General

Target

91bcad3fd96b492c3d8ca7657b56f5830e0c66c46dc05d0fb4c1f15c81f83bb7
Size

1.4MB
MD5

104211d12c157ebf9bf913c4f11bffe1
SHA1

7e5d4d0007bb5bba14bcef06c3f46c7f698aac8a
SHA256

91bcad3fd96b492c3d8ca7657b56f5830e0c66c46dc05d0fb4c1f15c81f83bb7
SHA512

ffc16965d7a1b3b148b1e0da7a5c0ef6693c52ead1b9340c0485d3e3ed518f089f7f487b48eb343990ef6ff8e6e5f6cb8cc8522d181ad835d9fa8f3b00f9b25b
SSDEEP

3072:5VlBrHTQfpizpLYoJYT5nyH5Q121Vi/x:jzkR+tYZ2FHi/

Score

N/A

Malware Config

Signatures

Files

91bcad3fd96b492c3d8ca7657b56f5830e0c66c46dc05d0fb4c1f15c81f83bb7
.dll windows x86

cd9aad98741e04ace38cd7afe890de2a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
GetWindowsDirectoryA
GetVersion
GetStartupInfoA
GetCommandLineA
GetCurrentThread
SuspendThread
GetCurrentProcess
IsBadWritePtr
GetACP
GetModuleHandleA
ExitProcess
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 976KB - Virtual size: 976KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cd9aad98741e04ace38cd7afe890de2a

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 12KB - Virtual size: 12KB

.data Size: 288KB - Virtual size: 288KB

.data Size: 976KB - Virtual size: 976KB

.idata Size: 44KB - Virtual size: 44KB

.rdata Size: 44KB - Virtual size: 44KB

.rsrc Size: 8KB - Virtual size: 8KB

.aspack Size: 8KB - Virtual size: 8KB

.adata Size: 4KB - Virtual size: 4KB

.text
Size: 12KB - Virtual size: 12KB

.data
Size: 288KB - Virtual size: 288KB

.data
Size: 976KB - Virtual size: 976KB

.idata
Size: 44KB - Virtual size: 44KB

.rdata
Size: 44KB - Virtual size: 44KB

.rsrc
Size: 8KB - Virtual size: 8KB

.aspack
Size: 8KB - Virtual size: 8KB

.adata
Size: 4KB - Virtual size: 4KB