3f406506f3c49404507a342f4a0159374c85392e8463cb14cb9dd0383aea1f1d

Sharing

Copy URL Twitter E-mail

General

Target

3f406506f3c49404507a342f4a0159374c85392e8463cb14cb9dd0383aea1f1d
Size

60KB
MD5

dbd398bbda1bdf9be1f5d22fd055e500
SHA1

30b191b0294715c08f6dba634e5d0018eecba127
SHA256

3f406506f3c49404507a342f4a0159374c85392e8463cb14cb9dd0383aea1f1d
SHA512

df74edd009a7c4243c32fac67154fcf690eabe95b2383e7758742afc6e0fa30c6034cace142af16b6984059d24fbb9690b5bb2ab8aeaf7ee69c6e75c303e2401
SSDEEP

768:mkxlq8oQsVJHaghSnlvkg+a3oGBUKYjCQ8hknDwq/KqL/CBwouJalGLEvm/Kx2Z9:NxlqxpnmlsWECmnDwq/KI/HouXAuX

Score

1^/10

Malware Config

Signatures

Files

3f406506f3c49404507a342f4a0159374c85392e8463cb14cb9dd0383aea1f1d
.exe windows x64

660fe5eb8511b34a186ada66d2e28714

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

FreeResource
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleExA
VirtualProtect
LockResource
SizeofResource
FindResourceA
CopyFileA
LoadResource
VirtualAlloc
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetModuleHandleW
GetLastError
SetLastError
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount

advapi32

RegSetKeyValueA

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
_set_fmode
__p__commode

ntdll

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind
RtlUnwindEx

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_set_app_type
_initterm
_initterm_e
exit
_exit
_get_initial_narrow_environment
_configure_narrow_argv
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_seh_filter_exe
abort
terminate
_initialize_onexit_table
_register_onexit_function
_crt_atexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode
calloc

api-ms-win-crt-string-l1-1-0

wcsncmp

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

660fe5eb8511b34a186ada66d2e28714

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

api-ms-win-crt-stdio-l1-1-0

ntdll

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 804B

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 39KB - Virtual size: 39KB

.reloc Size: 512B - Virtual size: 300B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 804B

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 39KB - Virtual size: 39KB

.reloc
Size: 512B - Virtual size: 300B