79eb65a6f688ecdbf5b7a6f30772e7ece20e28489c72864244ca473d1a80fea7

Sharing

Copy URL Twitter E-mail

General

Target

79eb65a6f688ecdbf5b7a6f30772e7ece20e28489c72864244ca473d1a80fea7
Size

289KB
MD5

c72bb22331afa691363ad5faf0073dc6
SHA1

263081452ebe674b67886b4ccf8a70f23470c80d
SHA256

79eb65a6f688ecdbf5b7a6f30772e7ece20e28489c72864244ca473d1a80fea7
SHA512

751f9b403fea38812184d40afc8d33c12f47eb3b64ae28cfeb4d7347fc2ed4ed724d55b359bb7c6a581f5a05f33f295dcffd6b7b62aa7ec893fead17c5d843bc
SSDEEP

1536:wDyf7c4lKPL2aHlBlPJN5UR4LmADMIlSWWa5yPj03xcHEYkTX5n9swnsZN/emVnr:6yQHlVN5E0mAgLaQ6ckZ9cZTyxD+y

Score

N/A

Malware Config

Signatures

Files

79eb65a6f688ecdbf5b7a6f30772e7ece20e28489c72864244ca473d1a80fea7
.exe windows x86

0275f71a899d3906186884fd597e707b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

joyGetDevCapsA

kernel32

InterlockedIncrement
GetCurrentProcess
OpenSemaphoreA
VirtualFreeEx
Sleep
CreateEventA
TerminateProcess
GetLastError
GetProcAddress
VirtualAlloc
FreeUserPhysicalPages
VirtualAllocEx
GetLocalTime
GetProcessAffinityMask
HeapAlloc
GetCommandLineA
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
HeapReAlloc
HeapCreate
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 87KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stls
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0275f71a899d3906186884fd597e707b

Headers

DLL Characteristics

File Characteristics

Imports

winmm

kernel32

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 87KB - Virtual size: 94KB

.stls Size: 512B - Virtual size: 120B

.rsrc Size: 155KB - Virtual size: 155KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 87KB - Virtual size: 94KB

.stls
Size: 512B - Virtual size: 120B

.rsrc
Size: 155KB - Virtual size: 155KB