c0382abee06458bc34f2b1e4032df50e82a94ae203e9905a49cb0baedd4a8761

Sharing

Copy URL Twitter E-mail

General

Target

c0382abee06458bc34f2b1e4032df50e82a94ae203e9905a49cb0baedd4a8761
Size

331KB
MD5

8fbd009299a049ea9855e64ef9cf0658
SHA1

72c75a1ce4d20c5ff8ffa6ff2ecf74aeb143c91b
SHA256

c0382abee06458bc34f2b1e4032df50e82a94ae203e9905a49cb0baedd4a8761
SHA512

c93faa9e1f422a1b20442642d0192a156e7f48f68fff7f597369be91fccb1524d7fb502771b4972a4cdb0a9d916c019fc942ebda959b139b8e327d16c7a37e1b
SSDEEP

6144:PmUCO6IJhG3dEvEbTXeAGHyrII4AIrGXuX1xAOsrosQ:PmN243dEvEnuhSfjUr/V

Score

N/A

Malware Config

Signatures

Files

c0382abee06458bc34f2b1e4032df50e82a94ae203e9905a49cb0baedd4a8761
.exe windows x86

a9c1d623aa1e7b9a6945dc6e7e298017

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
CreateFileA
GetLocalTime
GetLastError
OutputDebugStringA
ReadFile
WriteFile
DeleteFileA
CloseHandle
FlushFileBuffers
SetConsoleTextAttribute
GetStdHandle
SetFilePointer
SetConsoleMode
ReadConsoleInputA
SetEndOfFile
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CompareStringW
CompareStringA
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetEnvironmentVariableW
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
LoadLibraryExA
GetCurrentProcessId
CreateFileMappingA
FreeLibrary
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetFullPathNameA
CreateDirectoryA
FindNextFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetFileAttributesA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetConsoleCP
GetConsoleMode
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
LoadLibraryA
InitializeCriticalSection

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

vstdlib

KeyValuesSystem

tier0

GetCPUInformation
?Lock@CThreadFastMutex@@ACEXII@Z
??0CThreadSpinRWLock@@QAE@XZ
?LockForWrite@CThreadSpinRWLock@@QAEXXZ
?UnlockWrite@CThreadSpinRWLock@@QAEXXZ
?LockForRead@CThreadSpinRWLock@@QAEXXZ
?UnlockRead@CThreadSpinRWLock@@QAEXXZ
?DevWarning@@YAXPBDZZ
GetThreadedLoadLibraryFunc
StackToolsNotify_LoadedLibrary
CreateSimpleThread
ReleaseThreadHandle
Plat_IsInDebugSession
ThreadWaitForObjects
_AssertValidReadPtr
_AssertValidWritePtr
AssertValidStringPtr
CommandLine_Tier0
?DevMsg@@YAXPBDZZ
Msg
Error
Warning
g_pMemAlloc

Exports

Exports

CreateInterface
cvar
g_pCVar

Sections

.text
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 62.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a9c1d623aa1e7b9a6945dc6e7e298017

Headers

File Characteristics

Imports

kernel32

advapi32

vstdlib

tier0

Exports

Exports

Sections

.text Size: 228KB - Virtual size: 227KB

.rdata Size: 64KB - Virtual size: 60KB

.data Size: 44KB - Virtual size: 62.8MB

.text
Size: 228KB - Virtual size: 227KB

.rdata
Size: 64KB - Virtual size: 60KB

.data
Size: 44KB - Virtual size: 62.8MB