cb7c82e466b356e562a059dd27695b193a6931fc0f605cb55e4ef36ebdc330a4

General

Target

cb7c82e466b356e562a059dd27695b193a6931fc0f605cb55e4ef36ebdc330a4
Size

894KB
MD5

da510176c64571570b131ce3842d26e5
SHA1

0f539076b7fc3f6f49dfb739fbfd8141b85b9bdb
SHA256

cb7c82e466b356e562a059dd27695b193a6931fc0f605cb55e4ef36ebdc330a4
SHA512

b58b778b719bc2b2c4962c8552350d75c175056024e37cb39a38d8e645f408a78de1339c5c986888f03baef04c659a3720e1366e05a40fd699107ae1fc005b02
SSDEEP

24576:s0pGMLBNM+WsZs5l3EXajWAJQlBcP++ByQmPAe:B3LBNMs+5hEXajWAJQlBr+QQmPA

Score

1^/10

Malware Config

Signatures

Files

cb7c82e466b356e562a059dd27695b193a6931fc0f605cb55e4ef36ebdc330a4
.exe windows x64

4ffac8b9934b59fc5ae612265099ff29

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntdll

memmove
__chkstk
strcmp
wcslen
memcmp
memset
strncmp
strlen
strcpy
strcat
strstr
strrchr
memcpy

kernel32

GetCurrentThread
GetModuleHandleA
GetProcAddress
LoadLibraryA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetCurrentProcess
GetCurrentProcessId
MultiByteToWideChar
GetLastError
Sleep
GetTickCount64

gdi32

CreatePen
GetDIBits
GetDeviceCaps
TextOutW
MoveToEx
SetTextColor
StretchDIBits
SetBkMode
SetBkColor
SelectObject
Rectangle
LineTo
DeleteObject
DeleteDC
CreateFontW
CreateCompatibleDC
BitBlt
CreateCompatibleBitmap
CreateSolidBrush

Sections

.text
Size: 381KB - Virtual size: 381KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 261KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ffac8b9934b59fc5ae612265099ff29

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

kernel32

gdi32

Sections

.text Size: 381KB - Virtual size: 381KB

.rdata Size: 261KB - Virtual size: 261KB

.data Size: 28KB - Virtual size: 35KB

.pdata Size: 7KB - Virtual size: 7KB

.rsrc Size: 214KB - Virtual size: 214KB

.reloc Size: 512B - Virtual size: 16B

.text
Size: 381KB - Virtual size: 381KB

.rdata
Size: 261KB - Virtual size: 261KB

.data
Size: 28KB - Virtual size: 35KB

.pdata
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 214KB - Virtual size: 214KB

.reloc
Size: 512B - Virtual size: 16B