c19c10f653f18efb6ebc1517aa1968fbf71657e6114a36c3f6d562e8856ead1f

General

Target

c19c10f653f18efb6ebc1517aa1968fbf71657e6114a36c3f6d562e8856ead1f
Size

16KB
MD5

1c258a194511cc4f56e25a7113c7df7b
SHA1

0a60a02e8dc0cf63533edae4b138733c5bfed120
SHA256

c19c10f653f18efb6ebc1517aa1968fbf71657e6114a36c3f6d562e8856ead1f
SHA512

fbbf103993e466d46de635c172556fd0e0a9ea204a41947412c6b5a2b63a0e43768c7279c350462b97d8b9a4b4a1739813b993f1b65fccddd4a69216972abe2a
SSDEEP

192:/5D4oUlvgYX9c/p/qZvoxJFcuAQvFoZhp4QS168dhTgcKEZTTQ/x5Q/sw:RVbU0oXp4h9PRZTTQ/HWs

Score

N/A

Malware Config

Signatures

Files

c19c10f653f18efb6ebc1517aa1968fbf71657e6114a36c3f6d562e8856ead1f
.exe windows x86

86660ade9e7e53bafbe820dd1dce8e6f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strrchr
strstr

kernel32

GetProcAddress
CopyFileA
LoadLibraryA
GetTempPathA
ExitProcess
CreateFileA
FreeResource
lstrlenA
MoveFileExA
FreeLibrary
LoadResource
Process32First
WriteFile
Sleep
lstrcatA
MultiByteToWideChar
lstrcmpiA
Process32Next
LockResource
GetSystemDirectoryA
GetModuleFileNameA
GetCurrentThreadId
CloseHandle
GetVersion
DeleteFileA
lstrcpyA
GlobalAlloc
GetLastError
GlobalFree
GetModuleHandleA
LoadLibraryExA
SizeofResource
DeviceIoControl

user32

wsprintfA
GetInputState
PostThreadMessageA
GetMessageA

advapi32.dll.

CloseServiceHandle
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA

shell32

ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

86660ade9e7e53bafbe820dd1dce8e6f

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32.dll.

shell32

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 580B

.rsrc Size: 7KB - Virtual size: 6KB

.reloc Size: 512B - Virtual size: 496B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 580B

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 512B - Virtual size: 496B