a5da4b3a3f5f26955d505d1abdf74d1c8ebc96caa38498423a754a89ef377cf4

Sharing

Copy URL Twitter E-mail

General

Target

a5da4b3a3f5f26955d505d1abdf74d1c8ebc96caa38498423a754a89ef377cf4
Size

60KB
MD5

a0a9be54c72f7dc8fe89a2d90765fdc3
SHA1

8f770e61ac9ea089216b5357663e83909eb93d92
SHA256

a5da4b3a3f5f26955d505d1abdf74d1c8ebc96caa38498423a754a89ef377cf4
SHA512

9e161b44bc2b182558a2dfc4a4b50f646f6fb854fac05865a06301de295b38a10356df27239e825b23e838d4de389af0520977076f72a5879783e55b925edefd
SSDEEP

768:OJzRCrx1O3JJtS/n18bPHGnqM511Pw+/un0IPKxpxmm77IzfTTdKuAisKl4qR:OJzuxA3UOblaZ7eTdKuAisKldR

Score

N/A

Malware Config

Signatures

Files

a5da4b3a3f5f26955d505d1abdf74d1c8ebc96caa38498423a754a89ef377cf4
.exe windows x64

28be248d1c025f776ee4bec61e62c86a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CloseHandle
WaitForSingleObject
OpenProcess
CreateFileA
ReleaseMutex
DeviceIoControl
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
RtlUnwindEx
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
GetModuleHandleA
RaiseException
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapSetInformation
HeapCreate
LeaveCriticalSection
EnterCriticalSection
Sleep
GetACP
GetOEMCP
GetCPInfo
RtlPcToFileHeader
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LoadLibraryA
InitializeCriticalSection

user32

EnumDisplaySettingsExA
PostQuitMessage
RegisterClassExA
CreateWindowExA
ShowWindow
FindWindowA
GetWindowThreadProcessId
SendMessageA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28be248d1c025f776ee4bec61e62c86a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

setupapi

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 3KB - Virtual size: 8KB

.pdata Size: 2KB - Virtual size: 2KB

�� Size: 1024B - Virtual size: 1008B

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 3KB - Virtual size: 8KB

.pdata
Size: 2KB - Virtual size: 2KB

��
Size: 1024B - Virtual size: 1008B