9d69f7d535506b33a534abaa0b61cc482383ae30715308a419ff9ac972efbbbc

General

Target

9d69f7d535506b33a534abaa0b61cc482383ae30715308a419ff9ac972efbbbc
Size

229KB
MD5

16bb21b42c5e4400203d1d26363c51a9
SHA1

b818617b280a975643782370cb3f731c8ae8a1d5
SHA256

9d69f7d535506b33a534abaa0b61cc482383ae30715308a419ff9ac972efbbbc
SHA512

6aacdfb210ec0c305f0e72dc695f63487ff44b331fac7f3ff3f4d461466aef690ef8e31b878f2b3d21f63668291811cd55e7dad88819dc83ee682a3f25a5f6da
SSDEEP

6144:v2vdSaziYVEOKRALIR01ZpT4fnZu9o11xYpov6p5:v217ziYVEOKR0pTqnQ9sxYpoSn

Score

N/A

Malware Config

Signatures

Files

9d69f7d535506b33a534abaa0b61cc482383ae30715308a419ff9ac972efbbbc
.exe windows x86

33c15f52b40a0cbadc903ba5e66e1169

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
__set_app_type
wcscpy
??3@YAXPAX@Z
_iob
fopen

ntdll

_allrem
qsort
RtlCreateSecurityDescriptor
RtlQueryInformationAcl
RtlAddAce
RtlWriteRegistryValue
RtlFreeHeap
NtQueryVolumeInformationFile

ulib

??0ARRAY@@QAE@XZ
?Compare@OBJECT@@UBEJPBV1@@Z
?DisplayMessage@PROGRAM@@UBAEKW4MESSAGE_TYPE@@PADZZ
?Initialize@WSTRING@@QAEEPBGK@Z
?Strcat@WSTRING@@QAEEPBV1@@Z
?Usage@PROGRAM@@UBEXXZ
??1PATH_ARGUMENT@@UAE@XZ
??0CLASS_DESCRIPTOR@@QAE@XZ
?Initialize@WSTRING@@QAEEPBV1@KK@Z
??0PROGRAM@@IAE@XZ
?QueryString@WSTRING@@QBEPAV1@KK@Z
?Get_Standard_Output_Stream@@YGPAVSTREAM@@XZ
??0LONG_ARGUMENT@@QAE@XZ

kernel32

ResetEvent
InterlockedDecrement
GetCurrentThread
SetEvent
InterlockedExchange
GetThreadLocale
GetConsoleOutputCP
LocalAlloc
InterlockedIncrement
IsBadWritePtr
VirtualFree
FindFirstFileW
lstrcmpiA

Sections

.text
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33c15f52b40a0cbadc903ba5e66e1169

Headers

File Characteristics

Imports

msvcrt

ntdll

ulib

kernel32

Sections

.text Size: 157KB - Virtual size: 156KB

.rdata Size: 63KB - Virtual size: 62KB

.data Size: 2KB - Virtual size: 198KB

.rsrc Size: 1024B - Virtual size: 960B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 157KB - Virtual size: 156KB

.rdata
Size: 63KB - Virtual size: 62KB

.data
Size: 2KB - Virtual size: 198KB

.rsrc
Size: 1024B - Virtual size: 960B

.reloc
Size: 5KB - Virtual size: 4KB