Slinkware[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Slinkware.exe
Size

599KB
MD5

dd95d25de98d28b0a876f838c2a9fa3c
SHA1

f136e2be3d29c97c29c54d2d4b4225477cdb2669
SHA256

0bade446fe989cdfffdd8ffc73417497f5da229a5a5c7610f62a9152d4e7396f
SHA512

3f15dc4d8314e26e98d0db755e5b59ccae1a5d7ad6990b81ec7d579ad13b682b87c9444ed5d09cd37850fd0f8248011f4d7d2add7391f6c53f5294e210c964ab
SSDEEP

12288:BNZLClT2UklCBvQiplTWlTXSuR8NZSre7ceskSEof5Hno3LIf:BNZJaYGlU++8yre7lskef5HnGIf

Score

1^/10

Malware Config

Signatures

Files

Slinkware.exe
.exe windows x64

2ace000a075a1b6f8910a58ec1801d35

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

winmm

timeBeginPeriod

kernel32

GetCurrentProcess
SetEndOfFile
GetStdHandle
GetLastError
CreateMutexA
Sleep
SetConsoleTextAttribute
SetConsoleTitleA
WriteConsoleW
HeapSize
CreateFileW
GetProcessHeap
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
QueryPerformanceCounter
QueryPerformanceFrequency
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
MultiByteToWideChar
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
CloseHandle
SetEvent
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
RtlUnwind
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
FreeLibrary
LoadLibraryExW
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW

user32

GetClassLongPtrA
GetForegroundWindow
GetClassNameA
PostMessageA
GetAsyncKeyState

Sections

.text
Size: 453KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ace000a075a1b6f8910a58ec1801d35

Headers

DLL Characteristics

File Characteristics

Imports

winmm

kernel32

user32

Sections

.text Size: 453KB - Virtual size: 452KB

.rdata Size: 119KB - Virtual size: 119KB

.data Size: 4KB - Virtual size: 10KB

.pdata Size: 17KB - Virtual size: 16KB

_RDATA Size: 512B - Virtual size: 148B

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 453KB - Virtual size: 452KB

.rdata
Size: 119KB - Virtual size: 119KB

.data
Size: 4KB - Virtual size: 10KB

.pdata
Size: 17KB - Virtual size: 16KB

_RDATA
Size: 512B - Virtual size: 148B

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 3KB - Virtual size: 3KB