81825b69d4afea1f3d110d98204b67303114cf46213f86b300d3831eea842953

General

Target

81825b69d4afea1f3d110d98204b67303114cf46213f86b300d3831eea842953
Size

41KB
MD5

91cd6f5efd6c7cd2803464a29e43201d
SHA1

5d6b5762a7c2b78461cee499f4769dc17c3bdce5
SHA256

81825b69d4afea1f3d110d98204b67303114cf46213f86b300d3831eea842953
SHA512

9b95ef2437f337b0113790491d0f06ee4a5350f84bb71aecec4e11d712f78b822c207c594b8737adcae0ca1f910227d0fa3c37ad545254f5bd709834328bbc25
SSDEEP

768:Jpt4n+EoqHeVdUitIXP92ObxHgpDfA2+XFkWquLKr43uz63Usb1Ysc6OS5kZlUiT:JUn+EzHyUiOXQu2unTKmue3UArvRol5

Score

N/A

Malware Config

Signatures

Files

81825b69d4afea1f3d110d98204b67303114cf46213f86b300d3831eea842953
.exe windows x86

200a9f58ce55cdab45798e2a49b8a2d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

OpenProcessToken
LookupPrivilegeValueA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA

kernel32

CloseHandle
WideCharToMultiByte
GetStdHandle
OpenFileMappingA
TlsSetValue
GlobalLock
GetSystemTime
GetFileSize
ExitProcess
TlsGetValue
WriteFile
SetThreadLocale
VirtualFree
GetFileType
CreateFileA
SetFilePointer
SetConsolePalette
LocalUnlock
SetEndOfFile
GetShortPathNameA
lstrcpyA
GetModuleHandleA
SearchPathA
GetFileSize
GetFullPathNameA
GetModuleFileNameA
SetFileAttributesA
lstrcatA
MoveFileA
CopyFileA
lstrcpynA
lstrlenA
RemoveDirectoryA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

user32

SetWindowTextA
ShowWindow
GetDlgItemTextA
SendDlgItemMessageA
CreateWindowExA

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 145KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

200a9f58ce55cdab45798e2a49b8a2d1

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

version

user32

Sections

.text Size: 7KB - Virtual size: 6KB

.data Size: 6KB - Virtual size: 51KB

.rsrc Size: 2KB - Virtual size: 2KB

.edata Size: 145KB - Virtual size: 191KB

.sdata Size: 1024B - Virtual size: 4KB

.text
Size: 7KB - Virtual size: 6KB

.data
Size: 6KB - Virtual size: 51KB

.rsrc
Size: 2KB - Virtual size: 2KB

.edata
Size: 145KB - Virtual size: 191KB

.sdata
Size: 1024B - Virtual size: 4KB