b931edb967de6bef9fbd8095f8d14f07fcf61aa8234992fbd1162f5238eece21

Sharing

Copy URL

Twitter E-mail

General

Target

b931edb967de6bef9fbd8095f8d14f07fcf61aa8234992fbd1162f5238eece21
Size

731KB
MD5

067242b22f1d94603af1172447a7623a
SHA1

838f20f8e64bb28f384cfa0491297d0a524d3eb3
SHA256

b931edb967de6bef9fbd8095f8d14f07fcf61aa8234992fbd1162f5238eece21
SHA512

68445291ad3a2d39467c505dfbb65d06a0d5cdf6da7ed440b9b5263f0173ad030797f187627d9cb50a15787746dd7190288e463e1e00cf41d8e91e4549e4892c
SSDEEP

6144:3Vr3/bqArtfuOa+LYrrLS0Pir1slAGUvHVMT:lr3/bTfdOr+0PQmAGUO

Score

N/A

Malware Config

Signatures

Files

b931edb967de6bef9fbd8095f8d14f07fcf61aa8234992fbd1162f5238eece21
.exe windows x86

a227f8d1a269f9b6b31026ccf4b348ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

ClearEventLogA
ImpersonateAnonymousToken
ImpersonateLoggedOnUser
ImpersonateNamedPipeClient
ReadEventLogA
RegCloseKey
RegDeleteKeyA
RegFlushKey
RegGetValueA
RegNotifyChangeKeyValue
RegisterEventSourceA

kernel32

CloseHandle
CreatePipe
CreateProcessA
DeleteCriticalSection
EnterCriticalSection
EscapeCommFunction
FindNextStreamW
FlushConsoleInputBuffer
GetBinaryTypeA
GetCommModemStatus
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GetHandleInformation
GetLastError
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
SetCommBreak
SetConsoleMode
SetEndOfFile
SetEnvironmentVariableA
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx

msvcrt

__getmainargs
__initenv
__lconv_init
__p__acmdln
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_initterm
_iob
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 628KB - Virtual size: 627KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1000B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a227f8d1a269f9b6b31026ccf4b348ee

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

Sections

.text Size: 71KB - Virtual size: 70KB

.data Size: 628KB - Virtual size: 627KB

.rdata Size: 18KB - Virtual size: 17KB

.bss Size: - Virtual size: 1000B

.idata Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 71KB - Virtual size: 70KB

.data
Size: 628KB - Virtual size: 627KB

.rdata
Size: 18KB - Virtual size: 17KB

.bss
Size: - Virtual size: 1000B

.idata
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 10KB - Virtual size: 9KB