34e7b8d7c45c1417479d2ad2f06ed341e00eef64ff948c23aea3ca576456c14d

Sharing

Copy URL Twitter E-mail

General

Target

34e7b8d7c45c1417479d2ad2f06ed341e00eef64ff948c23aea3ca576456c14d
Size

403KB
MD5

0c2a8e7ff0427c760de996371029b332
SHA1

47099cb05fe3a07542587971aeb272b2efd1539c
SHA256

34e7b8d7c45c1417479d2ad2f06ed341e00eef64ff948c23aea3ca576456c14d
SHA512

9fa0c995c87c53a117142dfc2e6bbf8fe348db78de0f5db60fa94027e8d05e9b1cd7d1a1d7c6155c974d64948a226f3f60ca9cab8476558a4b1e28e054f56f5f
SSDEEP

12288:1jCL1sm4DcPAiK9X5PUVVQOfKzAHDhxfStm:IJsm4DjMsHm0

Score

N/A

Malware Config

Signatures

Files

34e7b8d7c45c1417479d2ad2f06ed341e00eef64ff948c23aea3ca576456c14d
.exe windows x86

00a5b4d4d298171d67180443f70446f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PulseEvent
ExitProcess
FindClose
FindNextFileW
FindFirstFileW
SuspendThread
ResumeThread
InterlockedExchange
LoadLibraryA
VirtualAlloc
GetProcAddress
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceExW
GetLastError
VirtualProtect
VirtualFree
GetModuleHandleA
Sleep
CreateFileW
GetModuleHandleW
GetCurrentThreadId
SetEvent
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
RaiseException
GetStartupInfoW
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
RtlUnwind
VirtualQuery
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

user32

PostThreadMessageW
EnumWindows
MessageBoxW

ole32

CoInitialize
CoUninitialize
CoCreateInstance

pdh

PdhCalculateCounterFromRawValue
PdhEnumLogSetNamesW

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 355KB - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.emul
Size: 512B - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

00a5b4d4d298171d67180443f70446f7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

pdh

Sections

.text Size: 32KB - Virtual size: 32KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 355KB - Virtual size: 355KB

.emul Size: 512B - Virtual size: 504KB

.text
Size: 32KB - Virtual size: 32KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 355KB - Virtual size: 355KB

.emul
Size: 512B - Virtual size: 504KB