75043d3d59d387b064f95dff7d8c81344e0c2cc911974e4bc3cad9b454e43772

Sharing

Copy URL Twitter E-mail

General

Target

75043d3d59d387b064f95dff7d8c81344e0c2cc911974e4bc3cad9b454e43772
Size

640KB
MD5

eec5e87c024955c08190fcb3f8f304ac
SHA1

2dc154ea51b6b8656baa930562036426a6cf68e6
SHA256

75043d3d59d387b064f95dff7d8c81344e0c2cc911974e4bc3cad9b454e43772
SHA512

731bd9f2418a355abad9688789cad2556e70fea3ba30aad9ed5db7ccfd4c25e2a0986c70ecd12b2bc1aac5d0172dbd207013d11391ef88996d110fe6b1108928
SSDEEP

12288:yYbDY6Q8KzCHksLh2P+d0OQ5rr1shspJ88PkZ9OQ2z94onLQD:nY6jKzpmRd1y5TG932z94GQD

Score

N/A

Malware Config

Signatures

Files

75043d3d59d387b064f95dff7d8c81344e0c2cc911974e4bc3cad9b454e43772
.exe windows x86

989d60b63c3b94702fafbb1caebd62fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
LockResource
SizeofResource
LoadResource
FindResourceA
VirtualFree
GetProcAddress
LoadLibraryA
RaiseException
HeapValidate
IsBadReadPtr
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DebugBreak
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
DeleteCriticalSection
FatalAppExitA
GetModuleFileNameA
GetLastError
HeapReAlloc
HeapDestroy
HeapCreate
VirtualAlloc
InterlockedIncrement
InterlockedDecrement
GetModuleHandleA
ExitProcess
GetACP
GetOEMCP
GetCPInfo
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetCurrentThread
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
SetConsoleCtrlHandler
LoadLibraryW
RtlUnwind
VirtualQuery
FreeLibrary
InitializeCriticalSection
InterlockedExchange
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetLocaleInfoA
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointer
GetLocaleInfoW
GetTimeZoneInformation
CloseHandle
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA

Sections

.textbss
Size: - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 360KB - Virtual size: 359KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 196KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

989d60b63c3b94702fafbb1caebd62fa

Headers

File Characteristics

Imports

kernel32

Sections

.textbss Size: - Virtual size: 169KB

.text Size: 360KB - Virtual size: 359KB

.rdata Size: 68KB - Virtual size: 64KB

.data Size: 8KB - Virtual size: 14KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 196KB - Virtual size: 193KB

.textbss
Size: - Virtual size: 169KB

.text
Size: 360KB - Virtual size: 359KB

.rdata
Size: 68KB - Virtual size: 64KB

.data
Size: 8KB - Virtual size: 14KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 196KB - Virtual size: 193KB