5548260a2a4878d57bf23231555d660c976c9413a13645930c61f6d87c34ffbf

Sharing

Copy URL Twitter E-mail

General

Target

5548260a2a4878d57bf23231555d660c976c9413a13645930c61f6d87c34ffbf
Size

138KB
MD5

fbf7f2dc0e9808d6a5983b9bf1a2ed7a
SHA1

9483703277e36b6ea1544c9b82d6f16bd87b4be7
SHA256

5548260a2a4878d57bf23231555d660c976c9413a13645930c61f6d87c34ffbf
SHA512

5dbe75b780203fa5e71f8427e3a1a358ee8ce6c7fd16aaa3f355cdea0a513a6d053e830f8a8273a16cdb915adbe55565e3687456408b11f46a78cbbf0187dc47
SSDEEP

3072:MC9h5dBjKQ7PskPjvudPjYYo57YBaGOyrpwFcSv2O+5wu0ovMJ5Vty7:MC9h5dBjKQhPj42OBazywcmONtMJRy7

Score

N/A

Malware Config

Signatures

Files

5548260a2a4878d57bf23231555d660c976c9413a13645930c61f6d87c34ffbf
.exe windows x86

756fbc2b701ad7b17afe4eef6a51801d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

__WSAFDIsSet

kernel32

CreateFileW
Sleep
GetModuleFileNameA
WriteConsoleW
GetProcAddress
GetModuleHandleA
GetLastError
LoadLibraryA
GetStdHandle
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
DecodePointer
WriteFile
HeapFree
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetFileAttributesExW
HeapAlloc
HeapReAlloc
CompareStringW
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
GetFileType
SetStdHandle
GetStringTypeW
HeapSize
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx

advapi32

RegCloseKey

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

756fbc2b701ad7b17afe4eef6a51801d

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

advapi32

Sections

.text Size: 88KB - Virtual size: 88KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 2KB - Virtual size: 6KB

.rsrc Size: 1024B - Virtual size: 880B

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 88KB - Virtual size: 88KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 2KB - Virtual size: 6KB

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 6KB - Virtual size: 5KB