7a5e20e021dc29a07cad61f4d0bdb98e22749f13c3ace58220bfe978908bb7e9[.]bin

Sharing

Copy URL

Twitter E-mail

General

Target

7a5e20e021dc29a07cad61f4d0bdb98e22749f13c3ace58220bfe978908bb7e9.bin
Size

379KB
MD5

5a44e1d5691ec9395281123ea0bd501f
SHA1

64566d5049479227d2eff3d983b127c0339974cd
SHA256

7a5e20e021dc29a07cad61f4d0bdb98e22749f13c3ace58220bfe978908bb7e9
SHA512

55d85e77f70f25bae6cf8bbf5dd787d5771c2e38e99461b608f6375be9cb0b1031f3c0268b82eb03db05eb88ce37d5f37afbfc69ab0c4f90791a706013b168c8
SSDEEP

6144:iKhrG3sugbNHoLjmtbLC0Yq4L/mFWPLz2V0Pz2V0Pz2V0Pz2V0gqqi:i3sugbNHoLH/6WTnnnLqi

Score

N/A

Malware Config

Signatures

Files

7a5e20e021dc29a07cad61f4d0bdb98e22749f13c3ace58220bfe978908bb7e9.bin
.exe windows x86

79c5ab03c02854a056630e291956340b

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetOpenEnumW
WNetEnumResourceW
WNetCloseEnum

rstrtmgr

RmStartSession
RmGetList
RmRegisterResources
RmEndSession

kernel32

WriteFile
TerminateProcess
GetModuleFileNameW
GetEnvironmentVariableW
WaitForSingleObject
CreateFileW
OpenProcess
Sleep
GetLastError
lstrcatW
CloseHandle
GetPriorityClass
LocalFree
MoveFileExW
GetCurrentProcessId
CreateProcessW
lstrcpyW
IsDebuggerPresent
CheckRemoteDebuggerPresent
GetFileSizeEx
lstrlenW
CreateFileMappingW
MapViewOfFile
LoadLibraryW
GetLogicalDrives
FindFirstFileW
FindNextFileW
GetStdHandle
WaitForMultipleObjects
FindClose
CreateMutexA
ReleaseMutex
GetExitCodeThread
GlobalAlloc
GlobalFree
CreateThread
lstrcmpiW
lstrcmpW
GetSystemInfo
GetProcessHeap
GetStringTypeW
SetStdHandle
GetCurrentProcess
SetPriorityClass
FlushFileBuffers
ReadFile
ReadConsoleW
HeapSize
SetEndOfFile
WriteConsoleW
DecodePointer
UnmapViewOfFile
GetCurrentThreadId
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceCounter
VirtualQuery
GetSystemTimeAsFileTime
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
QueryPerformanceFrequency
GetCommandLineA
GetCommandLineW
HeapFree
HeapAlloc
GetFileType
GetExitCodeProcess
GetFileAttributesExW
CompareStringW
LCMapStringW
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
HeapReAlloc
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo

user32

wsprintfW

advapi32

CryptGenRandom
CryptAcquireContextW
CryptReleaseContext
CryptAcquireContextA
LookupPrivilegeValueW
AdjustTokenPrivileges
AllocateAndInitializeSid
SetEntriesInAclW
SetNamedSecurityInfoW
OpenProcessToken
FreeSid

shell32

SHGetFolderPathW

ole32

CoCreateInstance
CoInitialize

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 16.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79c5ab03c02854a056630e291956340b

Code Sign

Headers

DLL Characteristics

File Characteristics

Imports

mpr

rstrtmgr

kernel32

user32

advapi32

shell32

ole32

Sections

.text Size: 183KB - Virtual size: 183KB

.rdata Size: 157KB - Virtual size: 157KB

.data Size: 28KB - Virtual size: 16.1MB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 183KB - Virtual size: 183KB

.rdata
Size: 157KB - Virtual size: 157KB

.data
Size: 28KB - Virtual size: 16.1MB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 9KB - Virtual size: 8KB