50f61438cc60ab7d8ade113b42023f736ea58cf21c5407174724c2676c749fbf

Sharing

Copy URL Twitter E-mail

General

Target

50f61438cc60ab7d8ade113b42023f736ea58cf21c5407174724c2676c749fbf
Size

60KB
MD5

c31ecce16648679bef2a7d59ff51c458
SHA1

87f45b05cd8e0b0eb3fd5d6e35c25716c4684f15
SHA256

50f61438cc60ab7d8ade113b42023f736ea58cf21c5407174724c2676c749fbf
SHA512

e700727f8eb5d1113c795dc3dfcd368b6a683bc35e2d667fb64699d623d56ac69559877a1878b07a1f60b21e79766fdeb97db4c4fb0fa57d2822d224b9eaeb08
SSDEEP

1536:X+apmckg7d8FIq6DncczTNNCBOhfWAWUCY/z4ei2kMmWu3w8s3nnFuUgNn20hbg:X+ap4Id8FT2npTDfnWUCY/z472PmWuAD

Score

1^/10

Malware Config

Signatures

Files

50f61438cc60ab7d8ade113b42023f736ea58cf21c5407174724c2676c749fbf
.exe windows x64

660fe5eb8511b34a186ada66d2e28714

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

FreeResource
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleExA
VirtualProtect
LockResource
SizeofResource
FindResourceA
CopyFileA
LoadResource
VirtualAlloc
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetModuleHandleW
GetLastError
SetLastError
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount

advapi32

RegSetKeyValueA

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
_set_fmode
__p__commode

ntdll

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind
RtlUnwindEx

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_set_app_type
_initterm
_initterm_e
exit
_exit
_get_initial_narrow_environment
_configure_narrow_argv
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_seh_filter_exe
abort
terminate
_initialize_onexit_table
_register_onexit_function
_crt_atexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode
calloc

api-ms-win-crt-string-l1-1-0

wcsncmp

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

660fe5eb8511b34a186ada66d2e28714

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

api-ms-win-crt-stdio-l1-1-0

ntdll

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 804B

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 39KB - Virtual size: 39KB

.reloc Size: 512B - Virtual size: 300B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 804B

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 39KB - Virtual size: 39KB

.reloc
Size: 512B - Virtual size: 300B