malver[.]exe | Triage

General

Target

malver.exe
Size

972KB
MD5

f5472fde0d9dc2265f0bcf1d10e07304
SHA1

be5f0ea8a0c12d8a7ac42d626a2221fa8f43a569
SHA256

ed49a3316172695361814a599f3915cff0723f8c88e5c703d52bcd79b0d8175f
SHA512

78e119524de53de746f5a8c29196874ef7c440c8baeca519ee5a82337d2a4f228acca643f8f3e85f813ccb0a4c6509460664795ff37fecab88bb3b0d7d1ba1c0
SSDEEP

24576:motw9KV7t7cSevv5ihH68Kp8rhjFBMgk6CLt+N:motw9KV7t7cSevv5iEbp8rB7Mgk6CLC

Score

1^/10

Malware Config

Signatures

Files

malver.exe
.dll windows x86

7e4e9cec56d95d5617ebdebac31aabd2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
GetTickCount
WriteConsoleW
CloseHandle
CreateFileW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RaiseException
InterlockedFlushSList
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
LCMapStringW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
DecodePointer

user32

wsprintfW
wsprintfA

Exports

Exports

hOhbidoOZ

Sections

.text
Size: 631KB - Virtual size: 630KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e4e9cec56d95d5617ebdebac31aabd2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 631KB - Virtual size: 630KB

.rdata Size: 26KB - Virtual size: 25KB

.data Size: 4KB - Virtual size: 34KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 631KB - Virtual size: 630KB

.rdata
Size: 26KB - Virtual size: 25KB

.data
Size: 4KB - Virtual size: 34KB

.reloc
Size: 6KB - Virtual size: 5KB