1b1bae0b503d1aa9d659db31ed2cd208[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

1b1bae0b503d1aa9d659db31ed2cd208.exe
Size

401KB
MD5

1b1bae0b503d1aa9d659db31ed2cd208
SHA1

a0a740dabdb48f1ec5665f9ee6026734e5d6d044
SHA256

8beea44520f307488f94d04241245ac943e2013f165308bac4277efae326c060
SHA512

e960612d89779f9d80eb683a7f89acf43116131adab7044b9f2bd66b613afd1e8e83dc26a76424875b6f281265d93d17f63e8d288346e613658a386552c10d06
SSDEEP

6144:YKdKe+GXmr07DPIE5e20BnJSpY2vGo/WEVSMofYZzPtWMIvA1h7OHpjo9KK:YOkFr07d5e5gVLVPtW/Y1h7mp

Score

N/A

Malware Config

Signatures

Files

1b1bae0b503d1aa9d659db31ed2cd208.exe
.exe windows x86

d864a0f85533793e0e80b085aa445269

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomW
AssignProcessToJobObject
DeleteCriticalSection
EnterCriticalSection
FreeConsole
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
InitializeCriticalSection
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__getmainargs
__initenv
__p__acmdln
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_initterm
_iob
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 369KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 196B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d864a0f85533793e0e80b085aa445269

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 21KB - Virtual size: 21KB

.data Size: 369KB - Virtual size: 368KB

.rdata Size: 3KB - Virtual size: 2KB

.eh_fram Size: 2KB - Virtual size: 2KB

.bss Size: - Virtual size: 196B

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 48B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 21KB - Virtual size: 21KB

.data
Size: 369KB - Virtual size: 368KB

.rdata
Size: 3KB - Virtual size: 2KB

.eh_fram
Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 196B

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 48B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 2KB - Virtual size: 1KB