ec67ec6d916df3dca7cc25e36e5d459429644d3a94ba955fa549ea103d1e310e

Sharing

Copy URL Twitter E-mail

General

Target

ec67ec6d916df3dca7cc25e36e5d459429644d3a94ba955fa549ea103d1e310e
Size

5.9MB
MD5

65700e6d8e181fbd8660533e53bad3ac
SHA1

5561303709fc9d0ea8e6c606d87a75dba41af681
SHA256

ec67ec6d916df3dca7cc25e36e5d459429644d3a94ba955fa549ea103d1e310e
SHA512

6c1e0e2515999bd48d6fffaafe1489f7d7de7d37b8210de770a72f6654c2903ea62d2a665290b0fe3eac58b212ce65cd657424d94a3fc8e40299dc69fe6605ec
SSDEEP

98304:G1wAy2+zXA1vYkbrJLOd3dDb3QCX/oSDFhSMrdm4dvK5nNHjZG14DclKPmR3Xabl:G10wVYj353Xw6Aidm4dveDkcm8bbpD

Score

N/A

Malware Config

Signatures

Files

ec67ec6d916df3dca7cc25e36e5d459429644d3a94ba955fa549ea103d1e310e
.exe windows x86

057446c37ff5c7ca4fc17bdabf757df9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WaitForSingleObject
GetLastError
CreateProcessW
GetProcessHeap
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
InterlockedExchangeAdd
Sleep
InterlockedIncrement
InterlockedDecrement
GetLocaleInfoA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
LCMapStringW
LCMapStringA
GetCPInfo
GetStringTypeA
GetFileInformationByHandle
GetFileSize
ReadFile
WriteFile
GetSystemInfo
SetFilePointer
GetFileType
CreateFileA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrlenA
CreateFileW
FreeEnvironmentStringsW
lstrlenW
GetEnvironmentStringsW
LocalFree
FormatMessageA
GetCurrentProcess
GetProcAddress
GetModuleHandleW
TerminateProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
VirtualAlloc
LoadLibraryA
GetModuleHandleA
RtlUnwind
RaiseException
GetStartupInfoW
HeapAlloc
HeapFree
HeapReAlloc
SetHandleCount
GetStdHandle
GetStartupInfoA
SetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameA
ExitProcess
GetModuleFileNameW
GetCommandLineW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetConsoleCP
GetConsoleMode

winhttp

WinHttpReadData
WinHttpQueryHeaders
WinHttpOpenRequest
WinHttpQueryDataAvailable
WinHttpReceiveResponse
WinHttpOpen
WinHttpConnect
WinHttpCloseHandle
WinHttpSendRequest

Sections

.text
Size: 372KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

STLPORT_
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

057446c37ff5c7ca4fc17bdabf757df9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

winhttp

Sections

.text Size: 372KB - Virtual size: 372KB

.rdata Size: 97KB - Virtual size: 97KB

.data Size: 39KB - Virtual size: 48KB

STLPORT_ Size: 512B - Virtual size: 32B

.rsrc Size: 11KB - Virtual size: 10KB

.reloc Size: 77KB - Virtual size: 76KB

.text
Size: 372KB - Virtual size: 372KB

.rdata
Size: 97KB - Virtual size: 97KB

.data
Size: 39KB - Virtual size: 48KB

STLPORT_
Size: 512B - Virtual size: 32B

.rsrc
Size: 11KB - Virtual size: 10KB

.reloc
Size: 77KB - Virtual size: 76KB