8151569e41f959aa4f1b655a64206ece[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

8151569e41f959aa4f1b655a64206ece.exe
Size

5.4MB
MD5

8151569e41f959aa4f1b655a64206ece
SHA1

b199dec737800712a1a853c41a805a76fba6c79d
SHA256

7ff66e5c542bf9785b98f6b8bdfdf89f7fa3030a83ed192458dafe4cf529cf8b
SHA512

8f006f5d0329ca72afbb57a7e991f26b68738d6611e3a7cfa2b1eaf8b32c6f1e5c011cf029dd0c8829fd4a7edbb3af06f8ddead01de2b3ab36426e787530d255
SSDEEP

98304:DCdHNYjSb/rHH4ps9ias3iDfRit+1X5/S6mZid5Sm3v9QBH7ywUcbA:0HNYjSjrn4pq0iD+mJ/SRZid5SgcuHw

Score

N/A

Malware Config

Signatures

Files

8151569e41f959aa4f1b655a64206ece.exe
.exe windows x64

06034380a955222fd337fddcf511d417

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetModuleFileNameA
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

ShowWindow

shell32

ShellExecuteA

msvcp140

?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcmp

api-ms-win-crt-stdio-l1-1-0

fputc

api-ms-win-crt-time-l1-1-0

_difftime64

api-ms-win-crt-filesystem-l1-1-0

_unlock_file

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment

api-ms-win-crt-heap-l1-1-0

malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

H$DWZCOH
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BDRRSJ&%
Size: - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

M#L_PCMO
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

#$%RWFEA
Size: - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RN&U(C**
Size: - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

^ZY%LJGW
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ICTXFO*$
Size: - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

#$%RWFEA
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

#$%RWFEA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

#$%RWFEA
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

06034380a955222fd337fddcf511d417

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: - Virtual size: 27KB

H$DWZCOH Size: - Virtual size: 18KB

BDRRSJ&% Size: - Virtual size: 4.2MB

M#L_PCMO Size: - Virtual size: 1KB

#$%RWFEA Size: - Virtual size: 480B

RN&U(C** Size: - Virtual size: 216B

^ZY%LJGW Size: - Virtual size: 108KB

ICTXFO*$ Size: - Virtual size: 512B

#$%RWFEA Size: - Virtual size: 1.6MB

#$%RWFEA Size: 2KB - Virtual size: 2KB

#$%RWFEA Size: 5.4MB - Virtual size: 5.4MB

.reloc Size: 512B - Virtual size: 192B

.rsrc Size: 512B - Virtual size: 469B

.text
Size: - Virtual size: 27KB

H$DWZCOH
Size: - Virtual size: 18KB

BDRRSJ&%
Size: - Virtual size: 4.2MB

M#L_PCMO
Size: - Virtual size: 1KB

#$%RWFEA
Size: - Virtual size: 480B

RN&U(C**
Size: - Virtual size: 216B

^ZY%LJGW
Size: - Virtual size: 108KB

ICTXFO*$
Size: - Virtual size: 512B

#$%RWFEA
Size: - Virtual size: 1.6MB

#$%RWFEA
Size: 2KB - Virtual size: 2KB

#$%RWFEA
Size: 5.4MB - Virtual size: 5.4MB

.reloc
Size: 512B - Virtual size: 192B

.rsrc
Size: 512B - Virtual size: 469B