5a49d51d0ebff757bf4ad3b6752f550fce3a8b29556260b18d431fd5fa498778

General

Target

5a49d51d0ebff757bf4ad3b6752f550fce3a8b29556260b18d431fd5fa498778
Size

56KB
MD5

74f708f4df8dc7bf0574b522acef9030
SHA1

ccd3fc2216b0a1be8b3ba5fe88492a6c77af3a55
SHA256

5a49d51d0ebff757bf4ad3b6752f550fce3a8b29556260b18d431fd5fa498778
SHA512

47cca9e477f067e55ff7ee8d75a3dfe5bb5ce19a14a0f461d62146dee3268a09a609c76b96e71fa20e4da636655e994fc753d422125c53c8712f79013d5016e7
SSDEEP

768:xEsxk9iZuobbXhFtc2aLIawZXeiaahBsxiGzLdbfnZRaNQ:7e9iZBHPtczIPZDBsxiGzlfnZMNQ

Score

N/A

Malware Config

Signatures

Files

5a49d51d0ebff757bf4ad3b6752f550fce3a8b29556260b18d431fd5fa498778
.exe windows x86

41fae9d9386221591936df6bd0c48dda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetCurrentThread
GetVersionExA
GetModuleFileNameA
lstrcatA
lstrcpyA
FindFirstFileA
OutputDebugStringA
CreateProcessA
GetCurrentProcess
CloseHandle
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

advapi32

OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegCreateKeyExA
RegSetValueExA
OpenThreadToken

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

41fae9d9386221591936df6bd0c48dda

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 1KB

.tc Size: 28KB - Virtual size: 28KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 1KB

.tc
Size: 28KB - Virtual size: 28KB