f8f071e06fad84392c94ba5ffff4d2044b29df099dceea2407d6c6f386bfcbec

Sharing

Copy URL Twitter E-mail

General

Target

f8f071e06fad84392c94ba5ffff4d2044b29df099dceea2407d6c6f386bfcbec
Size

1.0MB
MD5

db1f1d924eb6ec1149ea755cd9bef712
SHA1

468d943d8bee417c556b2fae585ef5ddee3bf884
SHA256

f8f071e06fad84392c94ba5ffff4d2044b29df099dceea2407d6c6f386bfcbec
SHA512

a0e947043e10d5edf34a14089ee78b2c3bcdf883c7bb76f7993d73797355bd12efdd6b7eb0205f01608a86b7e06bdf73e006120aed6bc39947bbac4eb6fedca1
SSDEEP

24576:RqbtTiVVDHGWTXwMJVI5S0eI6SJ+mHzGGIdXtW10ANZ:0ZTiVVDFwMJC5S0Oc+GGGiGZ

Score

N/A

Malware Config

Signatures

Files

f8f071e06fad84392c94ba5ffff4d2044b29df099dceea2407d6c6f386bfcbec
.exe windows x86

22163fce2a5cf4d863de49b93408390f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
Sleep
SizeofResource
GetProcAddress
LoadResource
GetTempPathA
ResumeThread
DeleteFileA
SetThreadContext
GetModuleHandleA
FindResourceA
SetEndOfFile
ReadFile
GetModuleHandleW
ExitProcess
HeapAlloc
GetLastError
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
RtlUnwind
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
CloseHandle
GetFullPathNameA
GetCurrentDirectoryA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
MultiByteToWideChar
CreateFileA
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcessHeap

advapi32

RegOpenKeyA
RegCloseKey

shell32

ShellExecuteA

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 962KB - Virtual size: 962KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

22163fce2a5cf4d863de49b93408390f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shell32

Sections

.text Size: 74KB - Virtual size: 73KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 962KB - Virtual size: 962KB

.text
Size: 74KB - Virtual size: 73KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 962KB - Virtual size: 962KB