c5eef61f62e7e6fe93307bf473ccd11b065de6751a0ea52357ba99a329fa8b51

Sharing

Copy URL Twitter E-mail

General

Target

c5eef61f62e7e6fe93307bf473ccd11b065de6751a0ea52357ba99a329fa8b51
Size

281KB
MD5

fc00309c24d612ca05eec6c5509b500e
SHA1

42b705016dc99deaee689346457949d01831d9a9
SHA256

c5eef61f62e7e6fe93307bf473ccd11b065de6751a0ea52357ba99a329fa8b51
SHA512

f28da1b49fca5c016f9df5bbe9aeafe5c528f5bff8877d8850b8c35881b34c924117e6434a7db80782eccbcf13fd501bbd4d8aadd489aa7ef6ed49858c4c8c36
SSDEEP

6144:eK0u0piRK4ulluGkEMeabyVeYVXVdCX8L24vE3SJjzoV:eK07YsNMeabmlVXLCX8LjvEC2V

Score

N/A

Malware Config

Signatures

Files

c5eef61f62e7e6fe93307bf473ccd11b065de6751a0ea52357ba99a329fa8b51
.exe windows x86

650fe548d28fbf8f4a552f6534ae97fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetLastError
GetModuleHandleA
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
EncodePointer
LoadLibraryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameW
VirtualQuery
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapFree
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
HeapAlloc
HeapReAlloc
IsProcessorFeaturePresent
LCMapStringW
GetStringTypeW
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
CloseHandle

mscms

IsColorProfileValid

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

650fe548d28fbf8f4a552f6534ae97fd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

mscms

Sections

.text Size: 28KB - Virtual size: 27KB

.text1 Size: 512B - Virtual size: 48B

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 6KB - Virtual size: 15KB

.rsrc Size: 234KB - Virtual size: 233KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 28KB - Virtual size: 27KB

.text1
Size: 512B - Virtual size: 48B

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 6KB - Virtual size: 15KB

.rsrc
Size: 234KB - Virtual size: 233KB

.reloc
Size: 4KB - Virtual size: 3KB