62b89c8c8e807dac0ddcd535b9e9e209f21a61dff8806b61f7ec59a8b7bfa686

Sharing

Copy URL

Twitter E-mail

General

Target

62b89c8c8e807dac0ddcd535b9e9e209f21a61dff8806b61f7ec59a8b7bfa686
Size

500KB
MD5

de90ad5fe2e720fb272529a759db43a0
SHA1

ed253eeeda4fd42bdc31bcbe81bc3bffe1a6d0ab
SHA256

62b89c8c8e807dac0ddcd535b9e9e209f21a61dff8806b61f7ec59a8b7bfa686
SHA512

2e6626d4aae1fc5e70df180082dd5c02fae1191118da94284c6d9081718c4b3bc86c0cfe062246fa81e67c1527dfcfd64d900a00c7d7d1fc65e92c9453eda773
SSDEEP

12288:2edhKjQne2AG6aVi7JV8/efeRijqBqzItW:2efKjQnenaumefgTMa

Score

N/A

Malware Config

Signatures

Files

62b89c8c8e807dac0ddcd535b9e9e209f21a61dff8806b61f7ec59a8b7bfa686
.exe windows x86

6aba08f1f52d2d19fb327cc3b6f6efb1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
GetLocalTime
VirtualFree
SetThreadPriority
GetModuleHandleW
GetProcAddress
GetLastError
GetTickCount
VirtualAlloc
CloseHandle
CreateFileA
LoadLibraryA
Sleep
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
IsBadWritePtr
IsBadReadPtr
HeapValidate
TerminateProcess
GetCurrentProcess
ExitProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
SetStdHandle
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
VirtualProtect
GetSystemInfo
VirtualQuery

user32

LoadBitmapA
SetFocus

gdi32

CreatePen

ole32

CoInitialize

ws2_32

select

winmm

mciSendCommandA
auxSetVolume

Exports

Exports

?SETCONFIG@@YAXXZ

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.INITV3
Size: 4KB - Virtual size: 45B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.EPV
Size: 4KB - Virtual size: 618B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xcode
Size: 372KB - Virtual size: 371KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6aba08f1f52d2d19fb327cc3b6f6efb1

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

ws2_32

winmm

Exports

Exports

Sections

.text Size: 68KB - Virtual size: 67KB

.INITV3 Size: 4KB - Virtual size: 45B

.EPV Size: 4KB - Virtual size: 618B

.xcode Size: 372KB - Virtual size: 371KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 8KB - Virtual size: 423KB

.rsrc Size: 20KB - Virtual size: 16KB

.text
Size: 68KB - Virtual size: 67KB

.INITV3
Size: 4KB - Virtual size: 45B

.EPV
Size: 4KB - Virtual size: 618B

.xcode
Size: 372KB - Virtual size: 371KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 8KB - Virtual size: 423KB

.rsrc
Size: 20KB - Virtual size: 16KB