774a6b0267086eb2ceeb6b9c03afab949fbea4c23c03a30e0633fcec2c220f16

Sharing

Copy URL Twitter E-mail

General

Target

774a6b0267086eb2ceeb6b9c03afab949fbea4c23c03a30e0633fcec2c220f16
Size

632KB
MD5

1efe8c39d0db57995fe9c0e3e91e4240
SHA1

719b5aadbb2b4ce9d9ee7c74f4ae2d71e2b4438d
SHA256

774a6b0267086eb2ceeb6b9c03afab949fbea4c23c03a30e0633fcec2c220f16
SHA512

0570a3e17fa6387ff290c090e842cca462ae3fd4d5933af133730c203b4dd4a08acb28ed5b6af085c8236912a7888fa6739f675a7c1ee5a327399afb322ab962
SSDEEP

12288:Qe9s9ImrkA5POz3igcFKJyNaDqFXMzB94CybTfpsWO6/PuCtrWT:Qe9mrkA52zigqQz0CyPfiv6PZ

Score

N/A

Malware Config

Signatures

Files

774a6b0267086eb2ceeb6b9c03afab949fbea4c23c03a30e0633fcec2c220f16
.exe windows x86

c1f52e1afabc4f3c6dcda518c34251c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResumeThread
SuspendThread
ReadFile
SetThreadPriority
GetProcAddress
LoadLibraryA
VirtualAlloc
WriteFile
VirtualQuery
GetSystemInfo
GetTickCount
CloseHandle
SetStdHandle
LCMapStringW
LCMapStringA
RemoveDirectoryA
WaitForSingleObject
GetModuleHandleA
RaiseException
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
VirtualProtect
Sleep
QueryPerformanceCounter
FlushFileBuffers
GetOEMCP
GetStartupInfoA
GetCommandLineA
GetVersionExA
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
IsBadWritePtr
IsBadReadPtr
HeapValidate
TerminateProcess
GetCurrentProcess
ExitProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetLocaleInfoA

user32

LoadCursorA
wsprintfA
DestroyWindow
LoadImageA
GetDC
GetDesktopWindow

gdi32

CreatePen
SelectObject

ole32

CoUninitialize

ws2_32

select
closesocket

winmm

auxSetVolume
mciSendCommandA

avifil32

AVIMakeFileFromStreams

winscard

SCardCancel
SCardConnectA

Sections

.text
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xcode
Size: 480KB - Virtual size: 479KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 430KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c1f52e1afabc4f3c6dcda518c34251c8

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

ws2_32

winmm

avifil32

winscard

Sections

.text Size: 104KB - Virtual size: 101KB

.xcode Size: 480KB - Virtual size: 479KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 16KB - Virtual size: 430KB

.rsrc Size: 16KB - Virtual size: 13KB

.text
Size: 104KB - Virtual size: 101KB

.xcode
Size: 480KB - Virtual size: 479KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 16KB - Virtual size: 430KB

.rsrc
Size: 16KB - Virtual size: 13KB