af50eed4071af8442aa9afb8f59f89bfa53dd899c3b0cb6438ca80610612e9d0

Sharing

Copy URL Twitter E-mail

General

Target

af50eed4071af8442aa9afb8f59f89bfa53dd899c3b0cb6438ca80610612e9d0
Size

300KB
MD5

71eb2f2cdaf74b0ce7887a8accb6c52d
SHA1

15f89e934ec8f1bcec86f7b25311b6e0a9a5bba4
SHA256

af50eed4071af8442aa9afb8f59f89bfa53dd899c3b0cb6438ca80610612e9d0
SHA512

2964ddd24ad968cd575cb055663ab841141a355fd3388df6eb914541bb98fa76320545d0d869a745e8ff91e63fefe1e6b2df2311ff13f6b541a794c43474390b
SSDEEP

6144:RRuYX3p+07Omd74gWB4JsGlabY6sk66by+:RRu83p+bmB4g1Jlblk6l+

Score

N/A

Malware Config

Signatures

Files

af50eed4071af8442aa9afb8f59f89bfa53dd899c3b0cb6438ca80610612e9d0
.exe windows x86

ee3a552956d8d9c7367e81fe9b8bea26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchange
GetACP
GetLocaleInfoA
GetVersionExA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
GetCurrentProcessId
GetProcAddress
LoadLibraryA
GetSystemTime
LocalAlloc
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
HeapFree
GetModuleHandleA
GetCommandLineA
LCMapStringA
GetLastError
LCMapStringW
GetCPInfo
HeapAlloc
GetStringTypeA
GetStringTypeW
HeapReAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
GetModuleFileNameA
VirtualQuery
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
HeapSize
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
VirtualProtect
GetSystemInfo
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
IsBadReadPtr
IsBadCodePtr
FlushFileBuffers
SetFilePointer
CloseHandle
GetOEMCP
GetLocaleInfoW
SetStdHandle
ReadFile

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.fff
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.eee
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee3a552956d8d9c7367e81fe9b8bea26

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 56KB - Virtual size: 54KB

.fff Size: 8KB - Virtual size: 4KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 52KB

.eee Size: 208KB - Virtual size: 207KB

.rsrc Size: 4KB - Virtual size: 928B

.text
Size: 56KB - Virtual size: 54KB

.fff
Size: 8KB - Virtual size: 4KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 52KB

.eee
Size: 208KB - Virtual size: 207KB

.rsrc
Size: 4KB - Virtual size: 928B