b95ff65f77bf2ba3c5798631f03f0eb956c14e5273dcf6e84f38e7d99e2be7e6

Sharing

Copy URL Twitter E-mail

General

Target

b95ff65f77bf2ba3c5798631f03f0eb956c14e5273dcf6e84f38e7d99e2be7e6
Size

322KB
MD5

09dea05dcb186025318ff8a7ba05bafc
SHA1

dd2b3c5412215e6f04ee5633d941ee36a2d01278
SHA256

b95ff65f77bf2ba3c5798631f03f0eb956c14e5273dcf6e84f38e7d99e2be7e6
SHA512

320b791fed48871bb066d2c6dda47b51621a5aee8b7ee84b44b63bc53f0bb21770ceb0c49d122f04ec0a48aca107f7336dcd7f7c2999c4cf25f4f79bc68e10bb
SSDEEP

3072:VPgcr2ddxR9gyneFlqXhk8zzkOdjb/oKeRS+SS8FEnVFJsWQDiuLpnM6uv:VLgrFnUlq3z460kSkscLiqM7v

Score

1^/10

Malware Config

Signatures

Files

b95ff65f77bf2ba3c5798631f03f0eb956c14e5273dcf6e84f38e7d99e2be7e6
.exe windows x86

37437fdf2f996efc4629f1b4dd7357e5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumaProcessorNode
WriteConsoleOutputCharacterA
InterlockedIncrement
GetCurrentProcess
CancelWaitableTimer
GetTickCount
LoadLibraryW
GetPrivateProfileStructW
GetBinaryTypeA
GetGeoInfoA
OpenMutexW
GetLastError
SetLastError
GetProcAddress
SetLocaleInfoA
EnumSystemCodePagesW
BuildCommDCBW
GetProcessWorkingSetSize
LocalAlloc
GetNumberFormatW
GetCommMask
AddAtomA
FoldStringA
GetModuleHandleA
ReadConsoleInputW
LCMapStringW
VirtualAlloc
GetComputerNameA
LCMapStringA
GetStringTypeW
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
InterlockedDecrement
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar

user32

LoadMenuA
GetListBoxInfo

advapi32

ReportEventA

ole32

ReadClassStg

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yic
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xabuh
Size: 1024B - Virtual size: 723B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

37437fdf2f996efc4629f1b4dd7357e5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 60KB - Virtual size: 59KB

.data Size: 92KB - Virtual size: 1.3MB

.yic Size: 6KB - Virtual size: 6KB

.xabuh Size: 1024B - Virtual size: 723B

.rsrc Size: 152KB - Virtual size: 151KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 60KB - Virtual size: 59KB

.data
Size: 92KB - Virtual size: 1.3MB

.yic
Size: 6KB - Virtual size: 6KB

.xabuh
Size: 1024B - Virtual size: 723B

.rsrc
Size: 152KB - Virtual size: 151KB

.reloc
Size: 9KB - Virtual size: 9KB