0f01b9264c169e19c854e4ffbb28949de180970336fbd96eaf0f4abfb0349031

Sharing

Copy URL Twitter E-mail

General

Target

0f01b9264c169e19c854e4ffbb28949de180970336fbd96eaf0f4abfb0349031
Size

254KB
MD5

303c4fdbc7f3ae0b3af201374a94066f
SHA1

f6aeaf838ba450cfc3127849b0d958ff13f3a8d5
SHA256

0f01b9264c169e19c854e4ffbb28949de180970336fbd96eaf0f4abfb0349031
SHA512

25127a37b25baa27126a170ff8c35a7a4ce60fbb3e41cf39c06804942c012442e4e4b4361e3e2bdec2c11d8317cb57fd93d46c3771561ec24150b27741c927a7
SSDEEP

768:p11CFwXMiDe5lzcj8FKcDu0wUnG8aOKx/r5UtmW9Xu7WsZq7YzUM3+JC1GdeVtCF:p11CKXMFzAOD9G8azz56F/l6F/VG

Score

1^/10

Malware Config

Signatures

Files

0f01b9264c169e19c854e4ffbb28949de180970336fbd96eaf0f4abfb0349031
.exe windows x86

ad56eb7cebe2e9325eb19f3ed1e33dab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32FirstW
CloseHandle
ReadProcessMemory
VirtualQueryEx
SizeofResource
HeapFree
lstrlenW
GetModuleFileNameW
InitializeCriticalSectionEx
HeapSize
GetLastError
LockResource
HeapReAlloc
FindResourceExW
LoadResource
FindResourceW
HeapAlloc
HeapDestroy
DeleteCriticalSection
GetProcessHeap
Sleep
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
EnterCriticalSection
Process32NextW
CreateToolhelp32Snapshot
LeaveCriticalSection
OpenProcess

user32

DestroyWindow
DefWindowProcW
CreateWindowExW
EndDialog
RegisterClassExW
LoadAcceleratorsW
LoadStringW
LoadIconW
LoadCursorW
PostQuitMessage
DialogBoxParamW
TranslateMessage
GetWindowTextA
PeekMessageW
BeginPaint
FindWindowExA
GetInputState
DispatchMessageW
EndPaint
UpdateWindow

advapi32

RegSetValueExW
RegCloseKey
RegOpenKeyExW

msvcp140

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

ws2_32

recv
ioctlsocket
connect
socket
send
inet_ntoa
htons
WSAStartup
getaddrinfo
inet_pton
closesocket
WSACleanup

vcruntime140

_except_handler4_common
memmove
memset
__current_exception_context
__current_exception
_CxxThrowException
strstr
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
memchr
wcsstr
memcpy

api-ms-win-crt-heap-l1-1-0

_set_new_mode
free
malloc
_callnewh

api-ms-win-crt-runtime-l1-1-0

_controlfp_s
_register_onexit_function
terminate
_crt_atexit
_register_thread_local_exe_atexit_callback
_errno
_invalid_parameter_noinfo
_cexit
_c_exit
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe

api-ms-win-crt-string-l1-1-0

wmemcpy_s

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad56eb7cebe2e9325eb19f3ed1e33dab

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

msvcp140

ws2_32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 224KB - Virtual size: 224KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 224KB - Virtual size: 224KB

.reloc
Size: 1KB - Virtual size: 1KB