mars-wallet-64-1[.]01[.]12[.]0-8438[.]exe

General

Target
mars-wallet-64-1.01.12.0-8438.exe
Size 397KB
Sample230117-mdtjjsec63
SHA256 612580febe9bad2c60ab8ad8564a38680cf415581c542e5e6109e680dc5e9d15
MD5 581d545c4a3d99f4fb5b92752610e950
SHA1 66deede4f00f1a76cdcb9e52c9a42b371875be38
SHA512 ef036240c359453850fc5ec4bddeddff0cf7d8c5b43ded1ae620cd76de9c7fbc07533ec859236c554e97c7b2fbf286f6914630b6f36a89620139e6bee2bc5c35
SSDEEP 6144:ytN60S22Iq0NKGr8QsPgwKh10UfY2TDRK13yOz4RXvSTmE:ytN+ONKM8GwA6GJTVC3yO5N
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

mars-wallet-64-1.01.12.0-8438.exe

.exe 397KB

mars-wallet-64-1.01.12.0-8438.exe

IMPHASH 29066daaddce37746c3cad3caf9a9d34
SHA256 612580febe9bad2c60ab8ad8564a38680cf415581c542e5e6109e680dc5e9d15
MD5 581d545c4a3d99f4fb5b92752610e950
SHA1 66deede4f00f1a76cdcb9e52c9a42b371875be38
SHA512 ef036240c359453850fc5ec4bddeddff0cf7d8c5b43ded1ae620cd76de9c7fbc07533ec859236c554e97c7b2fbf286f6914630b6f36a89620139e6bee2bc5c35
SSDEEP 6144:ytN60S22Iq0NKGr8QsPgwKh10UfY2TDRK13yOz4RXvSTmE:ytN+ONKM8GwA6GJTVC3yO5N
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

9567

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualProtect HeapFree VirtualAlloc lstrlenA lstrcmpA Sleep CloseHandle HeapAlloc ExitProcess DecodePointer WriteConsoleW CreateFileW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetModuleHandleExW GetACP FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc RaiseException

user32

GetMessageA DispatchMessageA ShowWindow IsDialogMessageA MessageBoxA TranslateMessage CreateDialogParamA

Name

.text

Size

46KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

176B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

190KB

Virtual Size

190KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

mvbv85D

Size

131KB

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

mars-wallet-64-1.01.12.0-8438.exe

kernel32

user32