ff50b3a7ac46e63a74d5cb4a9a425695ac45ba4759858f42472a727e9b388c77

Sharing

Copy URL

Twitter E-mail

General

Target

ff50b3a7ac46e63a74d5cb4a9a425695ac45ba4759858f42472a727e9b388c77
Size

386KB
MD5

f9361429de0c485fbc0dd752594b9c8f
SHA1

612a355dfd9e6c693a20c452553bdb1e31e5418a
SHA256

ff50b3a7ac46e63a74d5cb4a9a425695ac45ba4759858f42472a727e9b388c77
SHA512

44752785d6cdad8a0fdbfb032275fa7d2b5426e2d083b73c6e308edb978bd4bb1de9a4065980a0fc2db4cf5bf5255f82ea6c685038e28a86f39a278d97040b41
SSDEEP

6144:qldXHpC3g5HfjQtdkGbATZeSMdkTDWZt5C:qHJeg5Lkk68sSMdk

Score

1^/10

Malware Config

Signatures

Files

ff50b3a7ac46e63a74d5cb4a9a425695ac45ba4759858f42472a727e9b388c77
.exe windows x86

3fed571cd63b33679b8971e59a5032f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameW
GetModuleHandleW
GetTickCount
GetNumberFormatA
GetGeoInfoW
GlobalAlloc
LoadLibraryW
ReadConsoleInputA
GetPrivateProfileStructW
GetBinaryTypeW
GetTempPathW
OpenMutexW
GetLastError
InterlockedIncrement
GetProcAddress
VirtualAlloc
BuildCommDCBW
GetProcessWorkingSetSize
AddAtomW
GetCommMask
FoldStringW
GetCurrentProcessId
LCMapStringW
GetLocaleInfoW
WriteConsoleOutputCharacterA
SetLastError
SetLocaleInfoA
LoadLibraryA
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
HeapAlloc
HeapCreate
VirtualFree
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount

user32

LoadMenuA
GetMenuInfo

advapi32

DeregisterEventSource
ReportEventA

winhttp

WinHttpOpen

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 486KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dujur
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sivot
Size: 1024B - Virtual size: 723B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3fed571cd63b33679b8971e59a5032f4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

winhttp

Sections

.text Size: 84KB - Virtual size: 83KB

.data Size: 92KB - Virtual size: 486KB

.dujur Size: 6KB - Virtual size: 6KB

.sivot Size: 1024B - Virtual size: 723B

.rsrc Size: 193KB - Virtual size: 192KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 84KB - Virtual size: 83KB

.data
Size: 92KB - Virtual size: 486KB

.dujur
Size: 6KB - Virtual size: 6KB

.sivot
Size: 1024B - Virtual size: 723B

.rsrc
Size: 193KB - Virtual size: 192KB

.reloc
Size: 8KB - Virtual size: 8KB