d456ee050f2a5f23a010d8301a8a5b52a434c8daf37ea7d4fe68e685dfeed65a

General

Target

d456ee050f2a5f23a010d8301a8a5b52a434c8daf37ea7d4fe68e685dfeed65a
Size

131KB
MD5

89b9a3a953b3592b1ede1f007127b601
SHA1

aa57c76ab7b5248da10115e225974f91b6f8b655
SHA256

d456ee050f2a5f23a010d8301a8a5b52a434c8daf37ea7d4fe68e685dfeed65a
SHA512

980d34fff08aa6ba2e493b8fbbd8fd9b04dd57740cea5ab6798176bc8054f414c9bcaa30eeb738c825972dbae90e4aa51a9156302e1a280a42b24be9387519f6
SSDEEP

3072:ob1yE4Eg7yr8s5vJ4rMe9p/zzg3asySEEWu0wa0nfUVYq:XJO4sjYMe9p/zzg3asyRfX08

Score

N/A

Malware Config

Signatures

Files

d456ee050f2a5f23a010d8301a8a5b52a434c8daf37ea7d4fe68e685dfeed65a
.exe windows x86

0ecd979743df52fc157ebc69799c4e28

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
CreateThread
DeleteFileA
FindNextFileA
FlushFileBuffers
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentThread
GetEnvironmentVariableA
GetFileSize
GetFullPathNameA
GetLastError
GetOEMCP
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetStringTypeA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadLocale
GlobalHandle
IsBadWritePtr
LoadLibraryA
LoadResource
Module32First
Module32Next
MoveFileExA
MulDiv
OutputDebugStringA
ReadFile
RemoveDirectoryA
ResumeThread
RtlUnwind
SetEnvironmentVariableA
SetErrorMode
SetHandleCount
SetPriorityClass
SetThreadPriority
SuspendThread
UnhandledExceptionFilter
WritePrivateProfileStringA

advapi32

AllocateAndInitializeSid
RegDeleteValueA

Sections

.code
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ecd979743df52fc157ebc69799c4e28

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.code Size: 88KB - Virtual size: 88KB

.data Size: - Virtual size: 504B

.bss Size: - Virtual size: 13KB

.idata Size: 1KB - Virtual size: 1KB

.edata Size: 6KB - Virtual size: 5KB

.rsrc Size: 34KB - Virtual size: 34KB

.code
Size: 88KB - Virtual size: 88KB

.data
Size: - Virtual size: 504B

.bss
Size: - Virtual size: 13KB

.idata
Size: 1KB - Virtual size: 1KB

.edata
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 34KB - Virtual size: 34KB