914844f9baf4da3cd3f5b94c970785c74fa89dec9684701ca23700a2e0143a5e

Sharing

Copy URL Twitter E-mail

General

Target

914844f9baf4da3cd3f5b94c970785c74fa89dec9684701ca23700a2e0143a5e
Size

212KB
MD5

6a81024d14b43bfb65a84a6db8afc519
SHA1

b329ccf8ce9e96dac197797086557d1c1b5f67bf
SHA256

914844f9baf4da3cd3f5b94c970785c74fa89dec9684701ca23700a2e0143a5e
SHA512

e975d2210c20ba988d382e54ecc130e2d0d9f5949dbacea7b64866b62690869ed262dd6d18b374ffabacc6afeda6ef9706adfe996e0cbcc051b3b312664f5ba1
SSDEEP

3072:ntNuikf+V9NQjJc01xt2n5ZP1H5BP01LtBwdRLjRZIwdMESderQBXZC9:ntNdkmT2B1/GPlP01YjRZIwed64

Score

N/A

Malware Config

Signatures

Files

914844f9baf4da3cd3f5b94c970785c74fa89dec9684701ca23700a2e0143a5e
.exe windows x86

cc6b3c46dc61fdf6f573d1aa2d6cc236

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCurrentDirectoryA
SetThreadLocale
GetCurrentDirectoryA
SetEndOfFile
LoadLibraryA
GetProcAddress
GetSystemDefaultLCID
GetModuleFileNameA
GetLastError
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
HeapFree
GetModuleHandleW
Sleep
ExitProcess
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetCommandLineA
GetStartupInfoA
GetFullPathNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetFileType
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetHandleCount
CloseHandle
RtlUnwind
SetEnvironmentVariableA
SetEnvironmentVariableW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
HeapSize
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
FlushFileBuffers
CompareStringA
CompareStringW
ReadFile
CreateFileA
GetStringTypeA
GetStringTypeW
GetProcessHeap

user32

MessageBoxA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

shell32

ShellExecuteA

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.erdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cc6b3c46dc61fdf6f573d1aa2d6cc236

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 66KB - Virtual size: 65KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 52KB - Virtual size: 51KB

.erdata Size: 76KB - Virtual size: 76KB

.text
Size: 66KB - Virtual size: 65KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 52KB - Virtual size: 51KB

.erdata
Size: 76KB - Virtual size: 76KB