e85ed54f48290e0e6c67c20ee74b92d38b95195d1aa993647de69f56d17a71dc

General

Target

e85ed54f48290e0e6c67c20ee74b92d38b95195d1aa993647de69f56d17a71dc
Size

53KB
MD5

6616eddcc816cbea64933b75e1a261e0
SHA1

2a4a54ae14a4f728522c0dcccef93d74053095c2
SHA256

e85ed54f48290e0e6c67c20ee74b92d38b95195d1aa993647de69f56d17a71dc
SHA512

856e49dba483b12f2b20909f06316546f4b8df754657abfb1af7ad7af0c98160caa6329e2ec1be177b25d9bd6a419b4930331749e15767085cf4053bb908a8ca
SSDEEP

1536:ZXwKzFQOTColqNw5qFPWUr8Ve9Ads489hqSup:ZAiFQkColqCqFPWUQVe9jJ0T

Score

N/A

Malware Config

Signatures

Files

e85ed54f48290e0e6c67c20ee74b92d38b95195d1aa993647de69f56d17a71dc
.exe windows x86

9d74fafa96c66a1f1b9bdf943964820d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
_cexit
_XcptFilter
_exit
_c_exit
setlocale
exit
wprintf
wcscat
fgets
_stricmp
printf
wcschr
_iob
vswprintf
fprintf
fwprintf
_wcsnicmp
_wcsicmp
wcslen
wcscpy
wcscmp
??2@YAPAXI@Z
??3@YAXPAX@Z

advapi32

TreeResetNamedSecurityInfoW
SetNamedSecurityInfoW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetFileSecurityW
ConvertSecurityDescriptorToStringSecurityDescriptorW
GetFileSecurityW
GetSecurityDescriptorDacl
AddAce
InitializeAcl
EqualSid
GetLengthSid
LookupAccountNameW
LookupAccountSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorControl

kernel32

lstrcmpiW
GetStdHandle
GetConsoleMode
lstrlenW
WideCharToMultiByte
WriteConsoleW
FindFirstFileW
FindNextFileW
FindClose
GetLastError
LocalAlloc
LocalFree
GetCurrentProcessId
FormatMessageW
LoadLibraryExA
GetVolumeInformationW
GetVolumePathNameW
FormatMessageA
GetFileAttributesW
GetVolumeNameForVolumeMountPointW
QueryPerformanceCounter
GetTickCount
SetThreadUILanguage
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetFullPathNameW

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9d74fafa96c66a1f1b9bdf943964820d

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

Sections

.text Size: 16KB - Virtual size: 16KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 35KB - Virtual size: 36KB

.text
Size: 16KB - Virtual size: 16KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 35KB - Virtual size: 36KB