d004c4352dcd25312fa7e4a453494d756eadcb035a5e18c9f7456e62961e4867

Sharing

Copy URL

Twitter E-mail

General

Target

d004c4352dcd25312fa7e4a453494d756eadcb035a5e18c9f7456e62961e4867
Size

371KB
MD5

5b158a551a014f60c53bd726305637bc
SHA1

d1da105af17a6a7cbd9f1360117d5ca619aaf573
SHA256

d004c4352dcd25312fa7e4a453494d756eadcb035a5e18c9f7456e62961e4867
SHA512

b0cd75018423db918bcf1f50ffe79cf49940b38345493ac711a30f923d7a6ace7873f008de3540deb971367d9d97e33ba24169adb3287147ac95c3f8e9b9cfdd
SSDEEP

6144:4ff3vIM4YHz1YnG55J6pel+Pde0aUJwPdB+sUTTf3iwMcA7BIvhw2s2hHxGZbrkJ:qfIPYHzun0kpelMeo7Xf8NIvS29hcZE

Score

N/A

Malware Config

Signatures

Files

d004c4352dcd25312fa7e4a453494d756eadcb035a5e18c9f7456e62961e4867
.exe windows x86

566ddec82107f31af64dc06ecdd9b505

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shlwapi

SHDeleteKeyA
SHSetValueA
SHDeleteValueA

user32

PeekMessageW

kernel32

GetLastError
ExitProcess
LocalAlloc
GetCommandLineW
LoadLibraryExA
GetCommandLineA
IsBadHugeReadPtr
GetVersionExA
LoadLibraryA
GetModuleHandleA
GetProcAddress
ExitThread
VirtualAllocEx
GetModuleHandleW

advapi32

RegEnumValueA
GetUserNameA
RegCreateKeyExA
RegQueryValueA

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 297KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rsrc9
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rsrc2
Size: 1024B - Virtual size: 663B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rsrc8
Size: 512B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rsrc4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rsrc1
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rsrc7
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rsrc3
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

566ddec82107f31af64dc06ecdd9b505

Headers

File Characteristics

Imports

shlwapi

user32

kernel32

advapi32

Sections

.text Size: 62KB - Virtual size: 62KB

DATA Size: 297KB - Virtual size: 296KB

rsrc9 Size: 2KB - Virtual size: 1KB

rsrc2 Size: 1024B - Virtual size: 663B

rsrc8 Size: 512B - Virtual size: 130B

rsrc4 Size: 1KB - Virtual size: 1KB

rsrc1 Size: 512B - Virtual size: 476B

rsrc7 Size: 2KB - Virtual size: 2KB

rsrc3 Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 936B

.text
Size: 62KB - Virtual size: 62KB

DATA
Size: 297KB - Virtual size: 296KB

rsrc9
Size: 2KB - Virtual size: 1KB

rsrc2
Size: 1024B - Virtual size: 663B

rsrc8
Size: 512B - Virtual size: 130B

rsrc4
Size: 1KB - Virtual size: 1KB

rsrc1
Size: 512B - Virtual size: 476B

rsrc7
Size: 2KB - Virtual size: 2KB

rsrc3
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 936B