9a97a157ed2321cd5bf106c8ba7f33890d0a842b26dc2b19c777afd0c081e7d2

Sharing

Copy URL Twitter E-mail

General

Target

9a97a157ed2321cd5bf106c8ba7f33890d0a842b26dc2b19c777afd0c081e7d2
Size

699KB
MD5

4e9bfca9a88b1868faf0977a2a010ca1
SHA1

9562c48ed6e87a5c2aa189fbae731f2c2dad8db3
SHA256

9a97a157ed2321cd5bf106c8ba7f33890d0a842b26dc2b19c777afd0c081e7d2
SHA512

dc93b4a6ef587a2ef2a54f9aa43659efd1fd9a1294c28f4c9face4cef408634a0473ae899c477956d0e79935cda9526575adebf9de8ece7b8d2ea3f2339b1952
SSDEEP

12288:Qj1yGLkxpqVEcOZiCSSBw0yO44nCX8TNF97Hu95CLgw1QjEcU1orIRgalj3RUJ83:wJLkjqGKxmnmkNFNHuaLJgEc0EIRgAqO

Score

N/A

Malware Config

Signatures

Files

9a97a157ed2321cd5bf106c8ba7f33890d0a842b26dc2b19c777afd0c081e7d2
.exe windows x64

32bdb77c6cf258944cb642fa43112b6e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegOpenKeyExW
RegCloseKey
RegEnumValueW

kernel32

GetCommandLineW
GetModuleHandleW
lstrlenW
GetStartupInfoW
HeapSetInformation
ExpandEnvironmentStringsW
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
Sleep
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId

user32

AllowSetForegroundWindow

msvcrt

memcpy
_fmode
__setusermatherr
_amsg_exit
?terminate@@YAXXZ
_acmdln
exit
_cexit
_ismbblead
_exit
_XcptFilter
__C_specific_handler
__getmainargs
_vsnwprintf
_initterm
__set_app_type
_commode
memset

ntdll

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind

ole32

CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoInitializeEx
CoUninitialize

shell32

ShellExecuteExW

shlwapi

ord158
ord437
StrTrimW

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 588KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

32bdb77c6cf258944cb642fa43112b6e

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

msvcrt

ntdll

ole32

shell32

shlwapi

Sections

.text Size: 11KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 276B

.rsrc Size: 98KB - Virtual size: 98KB

.reloc Size: 588KB - Virtual size: 2.0MB

.text
Size: 11KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 276B

.rsrc
Size: 98KB - Virtual size: 98KB

.reloc
Size: 588KB - Virtual size: 2.0MB