a1028809084348060e3e48b8f9113503a362be8518718bb6ff551d3c45d9305b

Sharing

Copy URL Twitter E-mail

General

Target

a1028809084348060e3e48b8f9113503a362be8518718bb6ff551d3c45d9305b
Size

292KB
MD5

ed085c132a2b4c44402e6a23c1c17dd6
SHA1

99f1472349a1d6db560b9ceef098f2f44e8cb23c
SHA256

a1028809084348060e3e48b8f9113503a362be8518718bb6ff551d3c45d9305b
SHA512

7b58c677e1f42b394ca0752992a87277623238ccff0a6c03d1879a6e771ed04e99928d90868bdce89b4f81ffa427aa7e496bc2fc07ff3bd0b9e8943d110daa8a
SSDEEP

6144:AJqINQKtvqW6kvFwImr4bL3fmj3EQHYzItNs1lDl57f3:g3iWLvVbL3OjUQHYzItq1rBf3

Score

N/A

Malware Config

Signatures

Files

a1028809084348060e3e48b8f9113503a362be8518718bb6ff551d3c45d9305b
.exe windows x86

0358f8ad9a217b82573aa779c896b2c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
WSACleanup

kernel32

CreateDirectoryA
CompareStringW
CompareStringA
FreeLibrary
WideCharToMultiByte
GetProcAddress
GetLastError
LoadLibraryA
SetFileApisToOEM
SetFileApisToANSI
MultiByteToWideChar
AreFileApisANSI
CloseHandle
FlushViewOfFile
MapViewOfFile
OpenFileMappingA
Sleep
GetModuleFileNameA
VirtualQuery
GetCurrentThreadId
GetCurrentProcessId
WaitForSingleObject
CreateMutexA
ReleaseMutex
GetFileAttributesA
FindClose
FindNextFileA
FindFirstFileA
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetModuleHandleA
ExitProcess
RaiseException
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetFullPathNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetDriveTypeA
DeleteFileA
RemoveDirectoryA
SetEnvironmentVariableA
GetCommandLineA
GetVersionExA
GetProcessHeap
LCMapStringA
LCMapStringW
GetCPInfo
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
WriteFile
GetStdHandle
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetACP
GetOEMCP
IsValidCodePage
GetCurrentDirectoryA
ReadFile
SetStdHandle
GetFileType
SetHandleCount
GetStartupInfoA
CreateFileA
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetTimeZoneInformation
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetEndOfFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 164KB - Virtual size: 428KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0358f8ad9a217b82573aa779c896b2c9

Headers

File Characteristics

Imports

ws2_32

kernel32

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 5KB - Virtual size: 26KB

.rsrc Size: 1KB - Virtual size: 1KB

.vmp0 Size: 164KB - Virtual size: 428KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 5KB - Virtual size: 26KB

.rsrc
Size: 1KB - Virtual size: 1KB

.vmp0
Size: 164KB - Virtual size: 428KB