c99748e0d4e8529722f7c2622cf15cbffbc5874e1f6a18add197d26db03f59ae

Sharing

Copy URL Twitter E-mail

General

Target

c99748e0d4e8529722f7c2622cf15cbffbc5874e1f6a18add197d26db03f59ae
Size

372KB
MD5

920c62fdee712f018c2b79c5e2f41c0f
SHA1

01f2dcc8d7d7eb1c63b791234d86d1e525767620
SHA256

c99748e0d4e8529722f7c2622cf15cbffbc5874e1f6a18add197d26db03f59ae
SHA512

c5722fcaf3a3350fff2d5b512d5f85c865c51a6d65616d5b40014abb812d4289467b6cd45dc23c0fac199f27f695bb38d47591e10ea24cba2036ded153810c30
SSDEEP

6144:SUDO9zvCqB+wVP7jOmND/ZaB63N7HBcPhl7n5QNhH5vvvEnxZO:SUq9TrBV7tD/ZaB63pHBkvCNhHRX6Z

Score

N/A

Malware Config

Signatures

Files

c99748e0d4e8529722f7c2622cf15cbffbc5874e1f6a18add197d26db03f59ae
.exe windows x86

0f5396f26aec1cdea7b6e6963e90d1e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile
WriteFile
InitializeCriticalSection
DeleteCriticalSection
OutputDebugStringA
HeapAlloc
HeapFree
HeapCreate
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
GetLastError
GetCurrentProcessId
GetCurrentThreadId
GetFileTime
SetFileTime
GetComputerNameW
GetTickCount
FlushFileBuffers
CreateFileW
WriteConsoleW
SetStdHandle
HeapReAlloc
LoadLibraryW
GetConsoleMode
GetConsoleCP
IsProcessorFeaturePresent
QueryPerformanceCounter
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
ExitProcess
HeapSize
GetStringTypeW
GetModuleFileNameW
GetStdHandle
LCMapStringW
SetLastError
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
RtlUnwind
GetStartupInfoW
HeapSetInformation
SetFilePointer
lstrlenA
InterlockedDecrement
InterlockedIncrement
InterlockedCompareExchange
WaitForSingleObject
CreateSemaphoreA
GetModuleFileNameA
GetCurrentProcess
UnmapViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingA
ReadFile
Sleep
FindNextFileA
FindClose
GetWindowsDirectoryA
FindFirstFileA
GetSystemDirectoryA
GetComputerNameA
MultiByteToWideChar
CloseHandle
DeviceIoControl
CreateFileA
GetVersionExA
WideCharToMultiByte
GetACP
GetDriveTypeA
FreeLibrary
LoadLibraryA
GetVersion
GetModuleHandleA
TerminateProcess
GetProcAddress
GetCommandLineA
EncodePointer
DecodePointer
GetSystemTimeAsFileTime

user32

EnumDisplaySettingsA
wsprintfA
wsprintfW
GetKeyNameTextA
GetKeyboardLayout
MapVirtualKeyExA
SetCursor
LoadStringA
DispatchMessageA
TranslateMessage
GetMessageA
MapVirtualKeyA

advapi32

RegDeleteKeyA
RegEnumValueA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
GetUserNameA

ole32

CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

SysAllocString
SysFreeString
VariantClear
SysAllocStringLen
VariantInit

Sections

.text
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f5396f26aec1cdea7b6e6963e90d1e7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

Sections

.text Size: 210KB - Virtual size: 210KB

.rdata Size: 130KB - Virtual size: 130KB

.data Size: 15KB - Virtual size: 15KB

.rsrc Size: 1024B - Virtual size: 852B

.reloc Size: 13KB - Virtual size: 13KB

.text
Size: 210KB - Virtual size: 210KB

.rdata
Size: 130KB - Virtual size: 130KB

.data
Size: 15KB - Virtual size: 15KB

.rsrc
Size: 1024B - Virtual size: 852B

.reloc
Size: 13KB - Virtual size: 13KB