efc061c33f483d4bcddf6927183ae670d62e2d71ae702722177a6ee86405b88b

Sharing

Copy URL

Twitter E-mail

General

Target

efc061c33f483d4bcddf6927183ae670d62e2d71ae702722177a6ee86405b88b
Size

223KB
MD5

992a22afbc770d4a355810b1ec9ba8e9
SHA1

9054a664573c2d02b8c56f7fe39be637d4da9f31
SHA256

efc061c33f483d4bcddf6927183ae670d62e2d71ae702722177a6ee86405b88b
SHA512

6988bccc47261b665c0e1c7c6280caeed544eb56afeeed5e868841fe60a364e4e5529b39e4aeee4b610dd45f5c50dbfc14ce804156c8d7923f47b4e458a0b0a7
SSDEEP

3072:OxjE7l/5Ruol2ctPuz1yqbpmzATkBz/I8p+azH2YFG3a1+Sbh4BszL8U8HfQAsg2:AETRj2WWR2OK+a72T3++SSuzL8Xs

Score

N/A

Malware Config

Signatures

Files

efc061c33f483d4bcddf6927183ae670d62e2d71ae702722177a6ee86405b88b
.exe windows x86

539c17a9139d361dc03cc2e8092468d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA

psapi

GetModuleFileNameExA

kernel32

GetFileType
SetEnvironmentVariableA
CompareStringW
GetModuleHandleA
GetLastError
GetThreadContext
GetCurrentThread
LockResource
LoadResource
FindResourceA
ExitProcess
WriteProcessMemory
VirtualProtectEx
GetCurrentProcess
WaitForSingleObject
CreateThread
VirtualAlloc
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
HeapAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
RaiseException
IsProcessorFeaturePresent
HeapCreate
GetModuleHandleW
WriteFile
GetStdHandle
GetModuleFileNameW
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
ReadFile
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
GetCurrentDirectoryW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
LoadLibraryW
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
GetDriveTypeW
SetEndOfFile
GetProcessHeap
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
HeapReAlloc
WriteConsoleW
GetStringTypeW
CreateFileW

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

539c17a9139d361dc03cc2e8092468d7

Headers

DLL Characteristics

File Characteristics

Imports

user32

psapi

kernel32

Sections

.text Size: 49KB - Virtual size: 49KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 14KB

.rsrc Size: 151KB - Virtual size: 150KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 49KB - Virtual size: 49KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 14KB

.rsrc
Size: 151KB - Virtual size: 150KB

.reloc
Size: 5KB - Virtual size: 5KB