fbb11b76444e829b559f63123c19253f81f0c1a99807e449871fc76b8d8d5f72

Sharing

Copy URL Twitter E-mail

General

Target

fbb11b76444e829b559f63123c19253f81f0c1a99807e449871fc76b8d8d5f72
Size

322KB
MD5

24822e29c84b3ddcad242f881e8bf86f
SHA1

7cb233ced53d378d9159689932e51b2152e2300c
SHA256

fbb11b76444e829b559f63123c19253f81f0c1a99807e449871fc76b8d8d5f72
SHA512

d99ddb02538d10c1f7bf17674a90f1d4efb7fa30c928e471e80cbc10da9ef19e2d3e4d6f082a6c089c7928bccf23915e3abad36f29b5c64dd0664a3fa08012d7
SSDEEP

6144:UMuLixtrlxsIZXny5Jt7l8aE3hcWrjO4UAtptH5YvA7XeYa1KiQMCYfYlc5ls:Ubut3sSyL8aE3hcWrVltzH5zf7iSLem

Score

N/A

Malware Config

Signatures

Files

fbb11b76444e829b559f63123c19253f81f0c1a99807e449871fc76b8d8d5f72
.exe windows x86

5b1cc5e172ce2bf731c71e210133a46c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualProtect
lstrlenA
GetTickCount
Sleep
FlushInstructionCache
GetTempPathW
LoadLibraryA
GetLastError
OpenMutexA
IsDebuggerPresent
GetVersion
GetSystemTime
VirtualAlloc
GetProcAddress
SetLastError
GetModuleFileNameW
GetModuleHandleW
OpenMutexW
ExitProcess
GetStartupInfoW
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
VirtualQuery

user32

LoadCursorA

advapi32

GetCurrentHwProfileW
GetUserNameA
RegOpenKeyExA
GetUserNameW
GetCurrentHwProfileA
RegFlushKey

Sections

�text
Size: - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 278KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b1cc5e172ce2bf731c71e210133a46c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

�text Size: - Virtual size: 236KB

.text Size: 30KB - Virtual size: 29KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 278KB - Virtual size: 278KB

�text
Size: - Virtual size: 236KB

.text
Size: 30KB - Virtual size: 29KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 278KB - Virtual size: 278KB