7e607cf911cc8868d0a335a99b0c27eaf4839dad55f0a527a844a85a84612a63

Resubmissions

19/12/2022, 04:05

221219-enxpyshb9x 8

18/12/2022, 22:18

221218-18d91agg8y 8

Sharing

Copy URL Twitter E-mail

General

Target

7e607cf911cc8868d0a335a99b0c27eaf4839dad55f0a527a844a85a84612a63
Size

3.8MB
MD5

69efa03d69e330a4f00c3a2df3378d3c
SHA1

0b17c9637abca5294c52f56e05bb50fb5a721e35
SHA256

7e607cf911cc8868d0a335a99b0c27eaf4839dad55f0a527a844a85a84612a63
SHA512

63c3d5e3a72186b0f540e4f1f12071767a222311843b6c2c299cb1e51c164a32f88a3477cc65334dd4b53f30c0b1ae434cc357946d0ee5ab049e52056d1eac7b
SSDEEP

98304:MTYQ+RzwNyxHYQ43WuhWgKxoJ8bFTagUVzA2:X9XuhnKxFTagUm

Score

N/A

Malware Config

Signatures

Files

7e607cf911cc8868d0a335a99b0c27eaf4839dad55f0a527a844a85a84612a63
.exe windows x64

bd43e8a4f9d0a86ef3549c33262a158f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetSystemDirectoryA
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

ShowWindow

advapi32

RegCloseKey

shell32

ShellExecuteA

msvcp140

?_Xout_of_range@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcpy

api-ms-win-crt-stdio-l1-1-0

fread

api-ms-win-crt-time-l1-1-0

_difftime64

api-ms-win-crt-heap-l1-1-0

_set_new_mode

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-filesystem-l1-1-0

_mkdir

api-ms-win-crt-runtime-l1-1-0

__p___argv

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

EXRDUI_&
Size: - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

C$^GRDSD
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

S_UXINL$
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

*CGL%FHQ
Size: - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

J#ECSOYL
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

V^XZHGSE
Size: - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

#%Y&$ERG
Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

#%Y&$ERG
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

#%Y&$ERG
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

bd43e8a4f9d0a86ef3549c33262a158f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: - Virtual size: 212KB

EXRDUI_& Size: - Virtual size: 62KB

C$^GRDSD Size: - Virtual size: 7KB

S_UXINL$ Size: - Virtual size: 5KB

*CGL%FHQ Size: - Virtual size: 424B

J#ECSOYL Size: - Virtual size: 124KB

V^XZHGSE Size: - Virtual size: 1024B

#%Y&$ERG Size: - Virtual size: 1.8MB

#%Y&$ERG Size: 2KB - Virtual size: 2KB

#%Y&$ERG Size: 3.8MB - Virtual size: 3.8MB

.reloc Size: 512B - Virtual size: 180B

.text
Size: - Virtual size: 212KB

EXRDUI_&
Size: - Virtual size: 62KB

C$^GRDSD
Size: - Virtual size: 7KB

S_UXINL$
Size: - Virtual size: 5KB

*CGL%FHQ
Size: - Virtual size: 424B

J#ECSOYL
Size: - Virtual size: 124KB

V^XZHGSE
Size: - Virtual size: 1024B

#%Y&$ERG
Size: - Virtual size: 1.8MB

#%Y&$ERG
Size: 2KB - Virtual size: 2KB

#%Y&$ERG
Size: 3.8MB - Virtual size: 3.8MB

.reloc
Size: 512B - Virtual size: 180B