1581395555d1f20f20623f68803a1521bd5be2513b767a3bc1cb909700dfd8ff

Sharing

Copy URL Twitter E-mail

General

Target

1581395555d1f20f20623f68803a1521bd5be2513b767a3bc1cb909700dfd8ff
Size

660KB
MD5

201b879180f7c046c428d7dde9b66b90
SHA1

bc72e627eabaf2bf7ec83bda5f216a1e233e72b2
SHA256

1581395555d1f20f20623f68803a1521bd5be2513b767a3bc1cb909700dfd8ff
SHA512

822d5b829ce807649e8e182b612b3d0ee96e08eb94ce8b3265d3731ff05718c61a41511e397f8004e42f83aad4cba65b5e8715d17f57ff6e0319f7091486a881
SSDEEP

12288:oeUEFnIZJTN1YOz3igcFKJyNaDqFXMzB94CybTfpsWO6/PuCtrn:oe9nIZJTNbzigqQz0CyPfiv6PZ

Score

N/A

Malware Config

Signatures

Files

1581395555d1f20f20623f68803a1521bd5be2513b767a3bc1cb909700dfd8ff
.exe windows x86

44f731bbbd0ae1cbe1bbd21ef2e8ae97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
WriteFile
ResumeThread
SuspendThread
ReadFile
SetThreadPriority
LoadLibraryA
GetModuleHandleA
GetProcAddress
WaitForSingleObject
GetTickCount
GetLocaleInfoA
VirtualQuery
GetSystemInfo
VirtualProtect
VirtualAlloc
GetFileSize
SetFilePointer
FlushFileBuffers
LCMapStringW
LCMapStringA
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
SetStdHandle
Sleep
QueryPerformanceCounter
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetCommandLineA
GetVersionExA
IsBadWritePtr
IsBadReadPtr
HeapValidate
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
ExitProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
CloseHandle

user32

GetDC
GetDesktopWindow
DestroyWindow
wsprintfA

gdi32

SelectObject

ole32

CoCreateInstance

ws2_32

closesocket
select

winmm

mciSendCommandA
auxSetVolume

avifil32

AVIMakeFileFromStreams

winscard

SCardCancel
SCardConnectA

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.EPV
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 492KB - Virtual size: 900KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

44f731bbbd0ae1cbe1bbd21ef2e8ae97

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

ws2_32

winmm

avifil32

winscard

Sections

.text Size: 108KB - Virtual size: 104KB

.EPV Size: 4KB - Virtual size: 1KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 492KB - Virtual size: 900KB

.rsrc Size: 40KB - Virtual size: 38KB

.text
Size: 108KB - Virtual size: 104KB

.EPV
Size: 4KB - Virtual size: 1KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 492KB - Virtual size: 900KB

.rsrc
Size: 40KB - Virtual size: 38KB