6CC8D5F1CB1819791E4897F902FAF365[.]fil

Sharing

Copy URL Twitter E-mail

General

Target

6CC8D5F1CB1819791E4897F902FAF365.fil
Size

3.8MB
MD5

6cc8d5f1cb1819791e4897f902faf365
SHA1

0be513e1ca4a8a08365aeb8b688ecba6da3aa9b1
SHA256

29358a9a1941db0fc72ae765de0bc4e4c862a8b5bb3adc6784d3ac5379ed9789
SHA512

00342310d530960d9a9f7a2cf83dc2e89338dc4c6285b0a1b0bad720a1de5da841d160b79ef140fb8f32cb501e27f169b3d1f2c8aff69be4f0fff030a410d260
SSDEEP

98304:fygD7hkk2NiWY9UuwaHjLCt/4O0WGmKCBh84R7OcjJS:fhkk2tMwt/4OHGmKyh1R7OcjJS

Score

N/A

Malware Config

Signatures

Files

6CC8D5F1CB1819791E4897F902FAF365.fil
.exe windows x86

d9804b02157404d88ce06a0ceba2f5f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CommConfigDialogA
HeapAlloc
EndUpdateResourceW
GetCurrentProcess
SetEvent
GetTickCount
GetConsoleTitleA
WriteFile
FindResourceExA
GetConsoleCP
SetFileShortNameW
Sleep
GetFileAttributesW
lstrlenW
GetProcAddress
HeapUnlock
LoadLibraryA
LocalAlloc
SetConsoleWindowInfo
WaitForMultipleObjects
GetModuleFileNameA
SetConsoleTitleW
GetModuleHandleA
DeleteCriticalSection
GetCurrentProcessId
GetPrivateProfileSectionW
FindActCtxSectionStringW
PulseEvent
LocalUnlock
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
GetCPInfo
RtlUnwind
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
CloseHandle
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetStringTypeA
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleMode
FlushFileBuffers
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA

advapi32

AdjustTokenGroups
ReportEventA

winhttp

WinHttpCloseHandle

Sections

.text
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3.7MB - Virtual size: 11.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dijoger
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yak
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nicamew
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9804b02157404d88ce06a0ceba2f5f4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

winhttp

Sections

.text Size: 91KB - Virtual size: 91KB

.data Size: 3.7MB - Virtual size: 11.5MB

.dijoger Size: 27KB - Virtual size: 28KB

.yak Size: 1024B - Virtual size: 626B

.nicamew Size: 1024B - Virtual size: 963B

.rsrc Size: 45KB - Virtual size: 44KB

.text
Size: 91KB - Virtual size: 91KB

.data
Size: 3.7MB - Virtual size: 11.5MB

.dijoger
Size: 27KB - Virtual size: 28KB

.yak
Size: 1024B - Virtual size: 626B

.nicamew
Size: 1024B - Virtual size: 963B

.rsrc
Size: 45KB - Virtual size: 44KB