df43655240d9ede10d50a73f7e8b1fabdd7b86ab44a0694d93c3beefbd86725f

Sharing

Copy URL Twitter E-mail

General

Target

df43655240d9ede10d50a73f7e8b1fabdd7b86ab44a0694d93c3beefbd86725f
Size

155KB
MD5

89f412e8a28b40e98983bb0fb9f07404
SHA1

9462e2afe3fe826ce966945c664ba5e5101e6553
SHA256

df43655240d9ede10d50a73f7e8b1fabdd7b86ab44a0694d93c3beefbd86725f
SHA512

d7e9401c8b2c9f6a4c052b550253713aef5bb4ac545b50845d61dbeeb509e38309c1ea394d6ff119bf82178812f9f4be3bb67582579fe8cac49d44ff928bba5a
SSDEEP

3072:z+LYjH7KzKUvPsQrgiDtlsyB98Q6SYTOyWqGeHvrZ:z+LQHeBDtll/8BJXHvr

Score

N/A

Malware Config

Signatures

Files

df43655240d9ede10d50a73f7e8b1fabdd7b86ab44a0694d93c3beefbd86725f
.exe windows x86

b8152f4f402e825087c30946825b2e56

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rtutils

LogErrorA

kernel32

CancelIo
DeleteAtom
FindFirstFileW
GetTimeFormatW
IsValidLocale
GetCurrentThreadId
SetLocalTime
CallNamedPipeW
GetSystemDirectoryA
FlushFileBuffers
lstrlenW
CreateEventA
IsBadReadPtr
GetLocaleInfoW
DefineDosDeviceW
VirtualAlloc
UnhandledExceptionFilter
ClearCommBreak
VirtualFree
GetHandleInformation
GlobalLock
SetFileApisToOEM
EnumResourceTypesA
RaiseException
CreateThread
GetThreadContext
GetCPInfo
MoveFileExW
QueryDosDeviceW
DisconnectNamedPipe
GlobalAddAtomA
GlobalGetAtomNameW
DeleteCriticalSection
FileTimeToLocalFileTime
lstrlenA
SuspendThread
SetEndOfFile
FindNextFileW
SetHandleInformation
GetTimeFormatA
GetCurrentDirectoryA
SetTimerQueueTimer
DeviceIoControl
GetPriorityClass
GetStringTypeExW
OpenFile
GetComputerNameExA
GlobalFree
CancelWaitableTimer
GetModuleHandleA
FoldStringW
WriteFile
HeapSize
SetThreadContext
VerSetConditionMask
GetLongPathNameW
GetCurrentThread
TlsFree
VirtualProtect
CreatePipe

Exports

Exports

EnumFilePath

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Waeson
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sohen
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Pits
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.onno
Size: 512B - Virtual size: 153B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Sans
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pug
Size: 512B - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.taeit
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b8152f4f402e825087c30946825b2e56

Headers

DLL Characteristics

File Characteristics

Imports

rtutils

kernel32

Exports

Exports

Sections

.text Size: 122KB - Virtual size: 122KB

.Waeson Size: 1024B - Virtual size: 4KB

.sohen Size: 1KB - Virtual size: 1KB

.Pits Size: 512B - Virtual size: 28B

.onno Size: 512B - Virtual size: 153B

.Sans Size: 512B - Virtual size: 32B

.pug Size: 512B - Virtual size: 282B

.taeit Size: 21KB - Virtual size: 21KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 122KB - Virtual size: 122KB

.Waeson
Size: 1024B - Virtual size: 4KB

.sohen
Size: 1KB - Virtual size: 1KB

.Pits
Size: 512B - Virtual size: 28B

.onno
Size: 512B - Virtual size: 153B

.Sans
Size: 512B - Virtual size: 32B

.pug
Size: 512B - Virtual size: 282B

.taeit
Size: 21KB - Virtual size: 21KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 3KB - Virtual size: 2KB