bd54c54c001b30e000028d5c96bfb80a47c97b3d6e4c8919a44db01c6a46cba2

Sharing

Copy URL Twitter E-mail

General

Target

bd54c54c001b30e000028d5c96bfb80a47c97b3d6e4c8919a44db01c6a46cba2
Size

480KB
MD5

2450679fe8c78dcf8f17f7719dfd781d
SHA1

7e879e546e62bf08028381f5b1197b62c2675887
SHA256

bd54c54c001b30e000028d5c96bfb80a47c97b3d6e4c8919a44db01c6a46cba2
SHA512

e76c09584f8f67f1ac556fa38a26b75a9ce12f46c3b0981e4694cea6dc8baa2f3ac893cc69a9c9f1760ab93d46317923ebc246a273b296f0572a482fb60c29cf
SSDEEP

12288:ZQ/VajqB4QcwbIRFJyWjYHySyKd/N6y1YrTP:zjiQ3JyWbSyKdz1m7

Score

N/A

Malware Config

Signatures

Files

bd54c54c001b30e000028d5c96bfb80a47c97b3d6e4c8919a44db01c6a46cba2
.exe windows x86

e9a4e84fe27ab053c8d5e0f1e5867947

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceExA
GetProcAddress
GetModuleHandleA
GetCurrentProcess
LoadLibraryA
ExitProcess
WaitForSingleObject
CreateThread
IsBadReadPtr
VirtualProtect
VirtualAlloc
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetLastError
HeapFree
EncodePointer
DecodePointer
RaiseException
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
CloseHandle
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
ReadFile
GetModuleHandleW
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
SetFilePointer
RtlUnwind
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryW
CreateFileA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
WriteConsoleW
SetEndOfFile
GetProcessHeap
LCMapStringW
GetStringTypeW
CreateFileW

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 416KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9a4e84fe27ab053c8d5e0f1e5867947

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 41KB - Virtual size: 41KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 416KB - Virtual size: 416KB

.reloc Size: 5KB - Virtual size: 5KB

.bss Size: - Virtual size: 500KB

.text
Size: 41KB - Virtual size: 41KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 416KB - Virtual size: 416KB

.reloc
Size: 5KB - Virtual size: 5KB

.bss
Size: - Virtual size: 500KB