fc4da07183de876a2b8ed1b35ec1e2657400da9d99a313452162399c519dbfc6[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

fc4da07183de876a2b8ed1b35ec1e2657400da9d99a313452162399c519dbfc6.exe
Size

736KB
MD5

92edbbeff775928cfc6e3c8efefe4ecc
SHA1

fffa0ce086791c41360971e3ce6a0d1af1701616
SHA256

fc4da07183de876a2b8ed1b35ec1e2657400da9d99a313452162399c519dbfc6
SHA512

283e8d14e226d7096f4acd49730dc9cd611e879d8195b90f583bd270c84538fce5d22cef4884c3f19616dcd834c905da65a2f9957fbd6a4dbc02362651bd8d21
SSDEEP

12288:JedjVBta4u2skjf8pDjY8/GdaKhp6gC8duEo+TgQv:JedhBta4RFf8J/maK5C8txT1v

Score

1^/10

Malware Config

Signatures

Files

fc4da07183de876a2b8ed1b35ec1e2657400da9d99a313452162399c519dbfc6.exe
.exe windows x64

89d378a71fe03f8bced1c30af0fd1a8a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

MultiByteToWideChar
MoveFileExW
DeleteFileW
GetFileAttributesExW
SetFileAttributesW
GetFileAttributesW
CreateFileW
GetFileType
SetThreadPriority
CloseHandle
GetLastError
GetTickCount
LocalFree
GetFileSizeEx
GetFileTime
ReadFile
SetFilePointerEx
GetCurrentThread
WriteFile
GetCommandLineA
WriteConsoleW
HeapSize
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
ReadConsoleW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
HeapAlloc
HeapReAlloc
HeapFree
GetCommandLineW
GetStdHandle
ExitProcess
GetModuleHandleExW
RtlUnwindEx
RaiseException
RtlPcToFileHeader
FormatMessageW
WideCharToMultiByte
QueryPerformanceCounter
FindClose
FindFirstFileExW
FindNextFileW
GetFullPathNameW
AreFileApisANSI
SetLastError
GetModuleHandleW
GetProcAddress
WaitForSingleObjectEx
GetCurrentProcess
SwitchToThread
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetCPInfo
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
SetEvent
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcessId
InitializeSListHead
GetThreadTimes
FreeLibrary
GetModuleFileNameW
LoadLibraryExW
RtlUnwind

advapi32

ConvertSidToStringSidA
GetSecurityInfo

netapi32

DsGetDcNameA

wldap32

ord88
ord143
ord136
ord211
ord45
ord50
ord41
ord26
ord27
ord36
ord32
ord301
ord16
ord38
ord37
ord35
ord34
ord33

bcrypt

BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptSetProperty
BCryptCloseAlgorithmProvider
BCryptGenerateSymmetricKey
BCryptEncrypt
BCryptDestroyKey
BCryptCreateHash
BCryptHashData
BCryptFinishHash
BCryptDestroyHash
BCryptGenRandom
BCryptDeriveKeyPBKDF2

Sections

.text
Size: 522KB - Virtual size: 522KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

89d378a71fe03f8bced1c30af0fd1a8a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

netapi32

wldap32

bcrypt

Sections

.text Size: 522KB - Virtual size: 522KB

.rdata Size: 171KB - Virtual size: 171KB

.data Size: 13KB - Virtual size: 21KB

.pdata Size: 22KB - Virtual size: 22KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 522KB - Virtual size: 522KB

.rdata
Size: 171KB - Virtual size: 171KB

.data
Size: 13KB - Virtual size: 21KB

.pdata
Size: 22KB - Virtual size: 22KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 5KB - Virtual size: 4KB