ba65aa55f1c5df9bfa022a429fb95e506837e37fa5520a0076f5c66af82fb166

Sharing

Copy URL Twitter E-mail

General

Target

ba65aa55f1c5df9bfa022a429fb95e506837e37fa5520a0076f5c66af82fb166
Size

955KB
MD5

32539d092258520c58bb0a6d5657f308
SHA1

c58e534d7e592b7d7cdb57c667dcbaecf5a88f8d
SHA256

ba65aa55f1c5df9bfa022a429fb95e506837e37fa5520a0076f5c66af82fb166
SHA512

7235bd8524b3d436a225354195e79d997f03fcd3d3026e8c63f6c604efce5c3f3ba75250b4e440ff54af10926438def1c17e8f33b8e7926e6df57bcb83a48c2f
SSDEEP

12288:BF7rGNrkty0fkhAlmvqRVB7rGNrkty0fkhAlmvN2tJLJ:BFErmyFAeqRErmyFAeNWLJ

Score

N/A

Malware Config

Signatures

Files

ba65aa55f1c5df9bfa022a429fb95e506837e37fa5520a0076f5c66af82fb166
.exe windows x86

73e53452281fc3e992ebb7ba13c07f47

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableW
GetProcessIoCounters
SetDllDirectoryW
GetCurrentProcess
SetEnvironmentVariableW
GetSystemTimeAsFileTime
WideCharToMultiByte
GetModuleFileNameW
MultiByteToWideChar
ExpandEnvironmentStringsW
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
SetUnhandledExceptionFilter
EncodePointer
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
CloseHandle
GetProcAddress
GetLastError
CreateFileW
ReadFile
LoadLibraryExW
FreeLibrary
TerminateProcess

user32

MessageBoxW

msvcr100

_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
??2@YAPAXI@Z
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_vsnprintf_s
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
wcscpy
_wfullpath
??3@YAXPAX@Z
_snwprintf
fclose
memset
fgets
_wfopen
strlen
sprintf
getenv
strrchr
??_V@YAXPAX@Z
wcslen
_snprintf
strcpy
_stricmp
memcpy
__winitenv
_putenv

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 874KB - Virtual size: 873KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.xrdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

73e53452281fc3e992ebb7ba13c07f47

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcr100

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 874KB - Virtual size: 873KB

.reloc Size: 3KB - Virtual size: 3KB

.xrdata Size: 60KB - Virtual size: 60KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 874KB - Virtual size: 873KB

.reloc
Size: 3KB - Virtual size: 3KB

.xrdata
Size: 60KB - Virtual size: 60KB