cb134ee7588707ebeafcec594c01f4d9d64328272aadec3fb82f2b38067f0201

Sharing

Copy URL Twitter E-mail

General

Target

cb134ee7588707ebeafcec594c01f4d9d64328272aadec3fb82f2b38067f0201
Size

97KB
MD5

3b744a2e56a193846710e5ea5bf5d41f
SHA1

91a5c2db5e29b64bea0dbe1e923bb06c63d6c77e
SHA256

cb134ee7588707ebeafcec594c01f4d9d64328272aadec3fb82f2b38067f0201
SHA512

68c79b8262f2d31e558d1bb69c940049416d29a73f5867ffda95b2ca46acfbe1ab85b60e9cac7d6dd680dec1f191faac71d16ac27733744be9113eb300f63259
SSDEEP

768:5eIXwTnC6JPkGe4oWoLNFA7MAAPN3NfKGefMClyQEXYvokHZU9QZU9f:5eIsCl3LN5A2NdfKGefMIz

Score

1^/10

Malware Config

Signatures

Files

cb134ee7588707ebeafcec594c01f4d9d64328272aadec3fb82f2b38067f0201
.exe windows x86

8667b763519553c0f68f2324483da721

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc100

ord265

msvcr100

_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
fseek
exit
_ismbblead
_XcptFilter
fopen
malloc
memset
_exit
_cexit
__getmainargs
fread
vsprintf_s
??3@YAXPAX@Z
_amsg_exit
__FrameUnwindFilter
ftell

kernel32

GetCurrentProcess
LoadLibraryA
GetProcAddress
QueryPerformanceFrequency
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
SetUnhandledExceptionFilter
EncodePointer
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange

user32

TranslateAcceleratorA
RegisterClassExA
LoadCursorA
LoadIconA
DispatchMessageA
TranslateMessage
LoadStringA
LoadAcceleratorsA
GetMessageA

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8667b763519553c0f68f2324483da721

Headers

DLL Characteristics

File Characteristics

Imports

mfc100

msvcr100

kernel32

user32

mscoree

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 512B - Virtual size: 15KB

.rsrc Size: 48KB - Virtual size: 47KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 512B - Virtual size: 15KB

.rsrc
Size: 48KB - Virtual size: 47KB

.reloc
Size: 1KB - Virtual size: 1KB