ddf3e88009b31395bad6bdf11bd57e6b0f77d28ee29f2dda306c8a9147e45263

Sharing

Copy URL

Twitter E-mail

General

Target

ddf3e88009b31395bad6bdf11bd57e6b0f77d28ee29f2dda306c8a9147e45263
Size

5.4MB
MD5

08e7e0da767d6c6a629627caad9f9a78
SHA1

35e5d3c912e406cc6aaf3b25cb983641a7605b66
SHA256

ddf3e88009b31395bad6bdf11bd57e6b0f77d28ee29f2dda306c8a9147e45263
SHA512

266b5aeb67dd788dfa453da1c19dbd0d99de5471b631c5abba6f7526a1c662d73b4829f82f62ecddf3e198509602bf0ae44f0ca940a1d45598c4e06321e824ee
SSDEEP

98304:tDfRit+1X5/S6mZid5Sm3jlhuhG2LGbQkVCdPnLIVKWqEFJSog:tD+mJ/SRZid5S7hTZkkIKWLZ

Score

N/A

Malware Config

Signatures

Files

ddf3e88009b31395bad6bdf11bd57e6b0f77d28ee29f2dda306c8a9147e45263
.exe windows x64

06034380a955222fd337fddcf511d417

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetModuleFileNameA
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

ShowWindow

shell32

ShellExecuteA

msvcp140

?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcmp

api-ms-win-crt-stdio-l1-1-0

fputc

api-ms-win-crt-time-l1-1-0

_difftime64

api-ms-win-crt-filesystem-l1-1-0

_unlock_file

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment

api-ms-win-crt-heap-l1-1-0

malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

D#&A$FBZ
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

D)%&(X$U
Size: - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

OS__)Q^&
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

$TEWRGFS
Size: - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Q$MLW^#N
Size: - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

FTJ(IEAN
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

AY^^U%IQ
Size: - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

$TEWRGFS
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

$TEWRGFS
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

$TEWRGFS
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

06034380a955222fd337fddcf511d417

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: - Virtual size: 29KB

D#&A$FBZ Size: - Virtual size: 19KB

D)%&(X$U Size: - Virtual size: 4.2MB

OS__)Q^& Size: - Virtual size: 2KB

$TEWRGFS Size: - Virtual size: 480B

Q$MLW^#N Size: - Virtual size: 224B

FTJ(IEAN Size: - Virtual size: 108KB

AY^^U%IQ Size: - Virtual size: 512B

$TEWRGFS Size: - Virtual size: 1.6MB

$TEWRGFS Size: 2KB - Virtual size: 2KB

$TEWRGFS Size: 5.4MB - Virtual size: 5.4MB

.reloc Size: 512B - Virtual size: 168B

.rsrc Size: 512B - Virtual size: 469B

.text
Size: - Virtual size: 29KB

D#&A$FBZ
Size: - Virtual size: 19KB

D)%&(X$U
Size: - Virtual size: 4.2MB

OS__)Q^&
Size: - Virtual size: 2KB

$TEWRGFS
Size: - Virtual size: 480B

Q$MLW^#N
Size: - Virtual size: 224B

FTJ(IEAN
Size: - Virtual size: 108KB

AY^^U%IQ
Size: - Virtual size: 512B

$TEWRGFS
Size: - Virtual size: 1.6MB

$TEWRGFS
Size: 2KB - Virtual size: 2KB

$TEWRGFS
Size: 5.4MB - Virtual size: 5.4MB

.reloc
Size: 512B - Virtual size: 168B

.rsrc
Size: 512B - Virtual size: 469B