89848f6c989b9a31bcf25483c1c696c4b09a1ef559ef8abe8a672c2e0c82c7b9

Sharing

Copy URL

Twitter E-mail

General

Target

89848f6c989b9a31bcf25483c1c696c4b09a1ef559ef8abe8a672c2e0c82c7b9
Size

1.8MB
MD5

864a2cba46aaac6d12e7936a2503b786
SHA1

5793e6e762eeedc7c501b40481b3f4876da054f6
SHA256

89848f6c989b9a31bcf25483c1c696c4b09a1ef559ef8abe8a672c2e0c82c7b9
SHA512

a11e384e66bc19ab2de79df221037217a9ff716df01828a019a467b61f0a8863b7997cc7db47e11152b7d79c863ad4f9e51a38d05ff3f1fc39a41e96e29b9df3
SSDEEP

24576:RsBjOdJCCnW3v6P10ljJ9wT6qec8bGNKmZLxNeKMc:RGOWT3Cd01wJejYN6

Score

N/A

Malware Config

Signatures

Files

89848f6c989b9a31bcf25483c1c696c4b09a1ef559ef8abe8a672c2e0c82c7b9
.exe windows x86

dd9b53d4cc054782cc86304acaee2f83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
Sleep
GlobalFree
CreateThread
OpenFileMappingA
CopyFileExW
ReadConsoleA
GetCommandLineA
DeleteFileA
DeleteFileW
FindFirstFileA
GetFileSize
DeleteAtom
ExitThread
GetCPInfo
CreateDirectoryA
GetConsoleMode
ReadConsoleW
OpenFile
CopyFileA
GetCPInfo
ReadFile
FindAtomA
ExitThread
DeleteAtom
DeleteFileW
CopyFileExA
GetCommandLineA
GetStdHandle
CreateProcessA
GlobalFree
CopyFileW
WriteFile
GetStdHandle
FindAtomA
GetConsoleMode
CopyFileA
ReadConsoleW
CopyFileExA
OpenFile
GetCommandLineA
CopyFileW
ReadConsoleA
GetFileTime
GetLastError
GetStdHandle
CopyFileW
CopyFileExA
GetFileSize
FindAtomA
GetComputerNameA
FindFirstFileA
DeleteFileW
CreateThread
CreateProcessA
GetCommandLineA
GlobalFree
GetFileTime
DeleteFileA
ReadConsoleA
GetLastError
Sleep
GetCPInfo
ReadConsoleW
OpenFileMappingA
CreateDirectoryA
DeleteFileW
CreateThread
CopyFileA
OpenFile
ExitThread
Sleep
GetCPInfo
CopyFileW
GetFileSize
GetCommandLineA
GetComputerNameA
CreateProcessA
WriteFile
GetFileTime
GlobalFree
ReadFile
GetStdHandle
ExitThread
ReadConsoleW
ReadConsoleA
GetLastError
CopyFileA
DeleteFileW
CreateThread
FindFirstFileA
WriteFile
DeleteFileA
GlobalFree
GetComputerNameA
DeleteAtom
CreateProcessA
GetCommandLineA

Sections

.bbs
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 594B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 24KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd9b53d4cc054782cc86304acaee2f83

Headers

File Characteristics

Imports

kernel32

Sections

.bbs Size: 1.7MB - Virtual size: 1.7MB

.itext Size: 12KB - Virtual size: 8KB

.reloc Size: 4KB - Virtual size: 594B

.edata Size: 24KB - Virtual size: 2.3MB

.bss Size: 4KB - Virtual size: 164B

.rdata Size: 4KB - Virtual size: 1KB

.idata Size: 16KB - Virtual size: 12KB

.rsrc Size: 12KB - Virtual size: 10KB

.bbs
Size: 1.7MB - Virtual size: 1.7MB

.itext
Size: 12KB - Virtual size: 8KB

.reloc
Size: 4KB - Virtual size: 594B

.edata
Size: 24KB - Virtual size: 2.3MB

.bss
Size: 4KB - Virtual size: 164B

.rdata
Size: 4KB - Virtual size: 1KB

.idata
Size: 16KB - Virtual size: 12KB

.rsrc
Size: 12KB - Virtual size: 10KB