421fd3d3cdd8dac3c7d3b9b785bb8f28ab3b7081cef31bff284f7f2e06a82947

Sharing

Copy URL Twitter E-mail

General

Target

421fd3d3cdd8dac3c7d3b9b785bb8f28ab3b7081cef31bff284f7f2e06a82947
Size

136KB
MD5

570c48c7ccc2004e3614bac1723102f0
SHA1

d489c2ed91ec6145ab2cfc05eb55d466ea8df7cf
SHA256

421fd3d3cdd8dac3c7d3b9b785bb8f28ab3b7081cef31bff284f7f2e06a82947
SHA512

a9b37a70de6b9a28a2add37bb939183cec140ead8a3a5f27ff7b57776e34125b5f99736f63f9013970f83981252ea6d15de709e5c9df9862e19480edf21e9ac1
SSDEEP

3072:5lXuHef6dPSgv9H+8Xbh+k4l+TtLhzDc9:bCeSdPSgv9H+Ubw9lKnC

Score

N/A

Malware Config

Signatures

Files

421fd3d3cdd8dac3c7d3b9b785bb8f28ab3b7081cef31bff284f7f2e06a82947
.exe windows x86

bd2f8279853c417a38a21f2eccc608ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLocalTime
Sleep
DeleteFileA
WriteFile
GetTickCount
GetFileSize
GetProcAddress
LoadLibraryA
FlushFileBuffers
GetLocaleInfoA
VirtualQuery
GetSystemInfo
ResumeThread
SuspendThread
VirtualProtect
LCMapStringW
LCMapStringA
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoA
GetCommandLineA
GetVersionExA
IsBadWritePtr
IsBadReadPtr
HeapValidate
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
ExitProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
HeapAlloc
HeapReAlloc
VirtualAlloc
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
CloseHandle

user32

LoadCursorW
DestroyWindow
wsprintfA

gdi32

CreatePen

ws2_32

select
recv
send

winmm

mciSendCommandA

winscard

SCardConnectA

Exports

Exports

?hLOUD@@YAKK@Z

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bd2f8279853c417a38a21f2eccc608ec

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ws2_32

winmm

winscard

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 4KB - Virtual size: 7KB

.tls Size: 4KB - Virtual size: 100B

.rsrc Size: 16KB - Virtual size: 13KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 4KB - Virtual size: 7KB

.tls
Size: 4KB - Virtual size: 100B

.rsrc
Size: 16KB - Virtual size: 13KB