20ee8d9c4519fd389b55e53baa73a6abf312c66fa8a61f2a4a425415d008f72e

Sharing

Copy URL Twitter E-mail

General

Target

20ee8d9c4519fd389b55e53baa73a6abf312c66fa8a61f2a4a425415d008f72e
Size

365KB
MD5

33a348fafa93f7f3b0a7d69223747557
SHA1

4d2e649bd08ef6bb2ace3081a2de18cedb6fc4c4
SHA256

20ee8d9c4519fd389b55e53baa73a6abf312c66fa8a61f2a4a425415d008f72e
SHA512

1e2f5d6e1e37ef41e16fd6a64ddd7275fe4448b8110b910d743f4f8a09170cb85052f6d9d0ca8235f9a2c1aec4ed3ff4d6f9ad1f49ca9df2557b666bd15c7ed7
SSDEEP

6144:FW+1rxj3muaYXFTj2CJ+hgTAa1CZQ1mLiqtv:kwZ3muVXbJ+OtCZFf

Score

1^/10

Malware Config

Signatures

Files

20ee8d9c4519fd389b55e53baa73a6abf312c66fa8a61f2a4a425415d008f72e
.exe windows x86

37437fdf2f996efc4629f1b4dd7357e5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumaProcessorNode
WriteConsoleOutputCharacterA
InterlockedIncrement
GetCurrentProcess
CancelWaitableTimer
GetTickCount
LoadLibraryW
GetPrivateProfileStructW
GetBinaryTypeA
GetGeoInfoA
OpenMutexW
GetLastError
SetLastError
GetProcAddress
SetLocaleInfoA
EnumSystemCodePagesW
BuildCommDCBW
GetProcessWorkingSetSize
LocalAlloc
GetNumberFormatW
GetCommMask
AddAtomA
FoldStringA
GetModuleHandleA
ReadConsoleInputW
LCMapStringW
VirtualAlloc
GetComputerNameA
LCMapStringA
GetStringTypeW
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
InterlockedDecrement
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar

user32

LoadMenuA
GetListBoxInfo

advapi32

ReportEventA

ole32

ReadClassStg

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.did
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.busihi
Size: 1024B - Virtual size: 723B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

37437fdf2f996efc4629f1b4dd7357e5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 60KB - Virtual size: 59KB

.data Size: 135KB - Virtual size: 1.4MB

.did Size: 6KB - Virtual size: 6KB

.busihi Size: 1024B - Virtual size: 723B

.rsrc Size: 151KB - Virtual size: 151KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 60KB - Virtual size: 59KB

.data
Size: 135KB - Virtual size: 1.4MB

.did
Size: 6KB - Virtual size: 6KB

.busihi
Size: 1024B - Virtual size: 723B

.rsrc
Size: 151KB - Virtual size: 151KB

.reloc
Size: 10KB - Virtual size: 9KB