d2e412d81cfa9847a529a3d3b09ad009cc64137da0be239f142c4007d2773e77

Sharing

Copy URL Twitter E-mail

General

Target

d2e412d81cfa9847a529a3d3b09ad009cc64137da0be239f142c4007d2773e77
Size

436KB
MD5

e7e0e30c64d1c61535863893b7fa56c7
SHA1

fd6ec333644915dc55b074198caef9bb932a1169
SHA256

d2e412d81cfa9847a529a3d3b09ad009cc64137da0be239f142c4007d2773e77
SHA512

8709d2f441424999b47f8724987b2fb74bee7ffd39d5151f4fea8a882ff15e1bfa754d09eede8d9528ec0b5ac22c78adf0b418a096f99a6be59f3f14d11ccef8
SSDEEP

6144:NtKkCImbQp6G/H8+Gd5KNNBzIBIcP2J9/lElJ9K4/o25JKJOU:3/CL46I8+q5SNBzI2m2DlElaWFcJ

Score

N/A

Malware Config

Signatures

Files

d2e412d81cfa9847a529a3d3b09ad009cc64137da0be239f142c4007d2773e77
.exe windows x86

4769342aff36a168ee88e3cb8d1a471a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
HeapAlloc
GetLastError
HeapCreate
CreateThread
Sleep
HeapFree
GetVersionExA
GetProcessHeap
RaiseException
DebugBreak
WideCharToMultiByte
IsDebuggerPresent
MultiByteToWideChar
lstrlenA
GetProcAddress
LoadLibraryA
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
InterlockedIncrement
InterlockedDecrement
GetModuleHandleA
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapValidate
IsBadReadPtr
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
HeapDestroy
VirtualFree
GetModuleFileNameA
WriteFile
VirtualQuery
FreeLibrary
GetACP
GetOEMCP
GetCPInfo
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
SetConsoleCtrlHandler
LoadLibraryW
RtlUnwind
InterlockedExchange
InitializeCriticalSection
HeapReAlloc
VirtualAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetLocaleInfoA
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
SetFilePointer
GetLocaleInfoW
CloseHandle
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
GetTimeZoneInformation
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA

Sections

.textbss
Size: - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 352KB - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4769342aff36a168ee88e3cb8d1a471a

Headers

File Characteristics

Imports

kernel32

Sections

.textbss Size: - Virtual size: 167KB

.text Size: 352KB - Virtual size: 350KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 8KB - Virtual size: 15KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 3KB

.textbss
Size: - Virtual size: 167KB

.text
Size: 352KB - Virtual size: 350KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 8KB - Virtual size: 15KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 3KB