a067e53835a95089124a5d0d0b1b567696cb94894e3001c49156cc78e4448ded

Sharing

Copy URL Twitter E-mail

General

Target

a067e53835a95089124a5d0d0b1b567696cb94894e3001c49156cc78e4448ded
Size

5.6MB
MD5

d4e41efd6ca5ef9b9accc0fe88eb27cb
SHA1

bd9528d1a23e858e051211eb1d577cd3881676cd
SHA256

a067e53835a95089124a5d0d0b1b567696cb94894e3001c49156cc78e4448ded
SHA512

2b29d5afb7abdc28cb408856f04c1e2aa87094f37c586b90339b8bf4b9724d9a902f26b1f747915e9542faf45d65294ba3cea4e50beecf69a25ba9ed3be66cbc
SSDEEP

98304:TO3lC6TUj5kimlNwGbrcEbJw4yJpsExdyJKkMsflyY+7E5KQBZ+Xc4wn:TOo6TJcEbJw4y5xoSsdyY+cjBZ+XB

Score

N/A

Malware Config

Signatures

Files

a067e53835a95089124a5d0d0b1b567696cb94894e3001c49156cc78e4448ded
.dll windows x64

bf29a18a6087932d0739edf573cb28b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetCurrentDirectoryA
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

vcruntime140

__telemetry_main_return_trigger

api-ms-win-crt-string-l1-1-0

strcmp

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table

user32

CharUpperBuffW

Exports

Exports

GetFileVersionInfoA
GetFileVersionInfoByHandle
GetFileVersionInfoExA
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeExA
GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueW

Sections

.text
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UJa
Size: - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.EI"
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.,6z
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bf29a18a6087932d0739edf573cb28b5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

user32

Exports

Exports

Sections

.text Size: - Virtual size: 4KB

.rdata Size: - Virtual size: 4KB

.data Size: - Virtual size: 1KB

.pdata Size: - Virtual size: 480B

.UJa Size: - Virtual size: 3.2MB

.EI" Size: 2KB - Virtual size: 1KB

.,6z Size: 5.6MB - Virtual size: 5.6MB

.reloc Size: 512B - Virtual size: 208B

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: - Virtual size: 4KB

.rdata
Size: - Virtual size: 4KB

.data
Size: - Virtual size: 1KB

.pdata
Size: - Virtual size: 480B

.UJa
Size: - Virtual size: 3.2MB

.EI"
Size: 2KB - Virtual size: 1KB

.,6z
Size: 5.6MB - Virtual size: 5.6MB

.reloc
Size: 512B - Virtual size: 208B

.rsrc
Size: 1KB - Virtual size: 1KB