abe31b5b6925fd1e8fcaef152c1268d7ccc515488281338e3e88bc329403aeba

Sharing

Copy URL Twitter E-mail

General

Target

abe31b5b6925fd1e8fcaef152c1268d7ccc515488281338e3e88bc329403aeba
Size

133KB
MD5

46165217ac172001005e692c24729553
SHA1

69be80614cebb9b0a88d1ce5f8b2c85ab8eba449
SHA256

abe31b5b6925fd1e8fcaef152c1268d7ccc515488281338e3e88bc329403aeba
SHA512

0ce1db37f504c73624b6ec4e63183916abea64f8b33fa6b5c3c4e84e6251eb8fde2b14a1454f1e2dce95321b5aa3f92d71ae90c5156062b4481592bf4b398361
SSDEEP

1536:VCE8odPucNrU8lTXo6kmEL52LfR7Vef4LUh5jX/d7RqXhtLp:XYuz7EL52LfCgL6dd7RYPLp

Score

N/A

Malware Config

Signatures

Files

abe31b5b6925fd1e8fcaef152c1268d7ccc515488281338e3e88bc329403aeba
.exe windows x86

859e7cb20ec98260353054bfeca5dce5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

GetModuleFileNameExA

kernel32

FreeEnvironmentStringsW
ExitProcess
GetProcAddress
GetModuleHandleA
GetCurrentProcess
GetLastError
FindResourceExA
LockResource
LoadResource
FindResourceA
WaitForSingleObject
CreateThread
SetLastError
VirtualAlloc
LoadLibraryA
IsBadReadPtr
VirtualProtect
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
HeapFree
CloseHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
ReadFile
DeleteCriticalSection
VirtualFree
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
SetFilePointer
RtlUnwind
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
CreateFileA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoA
SetEndOfFile
GetProcessHeap
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

859e7cb20ec98260353054bfeca5dce5

Headers

DLL Characteristics

File Characteristics

Imports

psapi

kernel32

Sections

.text Size: 46KB - Virtual size: 45KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 66KB - Virtual size: 65KB

.reloc Size: 5KB - Virtual size: 5KB

.bss Size: - Virtual size: 152KB

.text
Size: 46KB - Virtual size: 45KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 66KB - Virtual size: 65KB

.reloc
Size: 5KB - Virtual size: 5KB

.bss
Size: - Virtual size: 152KB