36e7e52b7c63ca19ab94f4bca225a533628e126d112b489dac5881d201ede22c

Sharing

Copy URL

Twitter E-mail

General

Target

36e7e52b7c63ca19ab94f4bca225a533628e126d112b489dac5881d201ede22c
Size

518KB
MD5

a4d5ce319d5ce99e6f8c5573ffa7f93a
SHA1

c59ffad2adc67d13566dd256f34bd13cf7ba8564
SHA256

36e7e52b7c63ca19ab94f4bca225a533628e126d112b489dac5881d201ede22c
SHA512

679834feee8470dfd803cb0627058d44fc2d8bf414ee633f90b1441fe4a2fa71d1ec8df96388f305f777199e7e6096f61fd25b6f395cab6d58d5e4f86f97b99c
SSDEEP

6144:O0gQwxpQ4nfLRTZdLMG5sgfbdWkBeqdFq7LPEK9/g5UL6LuzxAPr:G/QsLTd4G5Mk+LPEDqLAuzxAD

Score

1^/10

Malware Config

Signatures

Files

36e7e52b7c63ca19ab94f4bca225a533628e126d112b489dac5881d201ede22c
.exe windows x86

7d267104c9117a6ccf97a0fcf1e0e579

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
HeapAlloc
WideCharToMultiByte
lstrlenA
GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess

ucrtbase

memcpy
_except_handler4_common
memset
__current_exception_context
__current_exception
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_configure_wide_argv
_get_wide_winmain_command_line
_set_app_type
_seh_filter_exe
_initterm_e
exit
_exit
terminate
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_initterm
_controlfp_s
_initialize_wide_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
_set_fmode
__stdio_common_vfprintf
puts
__p__commode

api-ms-win-crt-heap-l1-1-0

_set_new_mode
free
malloc
_callnewh

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-string-l1-1-0

_stricmp

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

fwe843S
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d267104c9117a6ccf97a0fcf1e0e579

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ucrtbase

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-string-l1-1-0

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 178KB - Virtual size: 178KB

.reloc Size: 1024B - Virtual size: 740B

fwe843S Size: 180KB - Virtual size: 180KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 178KB - Virtual size: 178KB

.reloc
Size: 1024B - Virtual size: 740B

fwe843S
Size: 180KB - Virtual size: 180KB