bf09711776eca7fea035869c73fcee8a9f26b1958a55a0493f8dba5517f52f75

General

Target

bf09711776eca7fea035869c73fcee8a9f26b1958a55a0493f8dba5517f52f75
Size

751KB
MD5

2c64b895119368b3b2406b6bb1528f78
SHA1

abc4bd684a443f7f3447e20b40806c4dc1e227b9
SHA256

bf09711776eca7fea035869c73fcee8a9f26b1958a55a0493f8dba5517f52f75
SHA512

9cb0f8e3bfdb0441fb8f71f95f32f42ff9208c9888d6041294c77707c4877a489575b55eb63ca48ce0e8440a7d75a0bb7a49e0c16f137ddb4fad181a7579a668
SSDEEP

6144:BHvzy6xG3BRVpXUcG2cvRC4ctcKybBuITIXIINcrtRM7hZxDsMWlmN:BHvlABREcpVt7/xAGN

Score

1^/10

Malware Config

Signatures

Files

bf09711776eca7fea035869c73fcee8a9f26b1958a55a0493f8dba5517f52f75
.exe windows x64

9fb9eebc8c052366a6d2a01bb6b3b257

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetLastError
GetProcAddress
GetStartupInfoA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
__C_specific_handler

msvcrt

___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_errno
_fileno
_fmode
_initterm
_lock
_onexit
_setjmp
_setmode
_unlock
abort
exit
fflush
fprintf
fputc
free
fwrite
localeconv
malloc
signal
strerror
strlen
vfprintf
wcslen

user32

MessageBoxA

Sections

.text
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 485KB - Virtual size: 484KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9fb9eebc8c052366a6d2a01bb6b3b257

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 223KB - Virtual size: 223KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 512B - Virtual size: 82KB

.pdata Size: 4KB - Virtual size: 3KB

.rsrc Size: 485KB - Virtual size: 484KB

.reloc Size: 512B - Virtual size: 112B

.text
Size: 223KB - Virtual size: 223KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 512B - Virtual size: 82KB

.pdata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 485KB - Virtual size: 484KB

.reloc
Size: 512B - Virtual size: 112B