e259f0e7a614e0d347c9cf7fb8249a5126f0e6f2bd74b03b05642b845a3e4dbb

Sharing

Copy URL Twitter E-mail

General

Target

e259f0e7a614e0d347c9cf7fb8249a5126f0e6f2bd74b03b05642b845a3e4dbb
Size

63KB
MD5

7004cebebb8717f6e93a824f36df8710
SHA1

8df2875a3fb0b80d669d74039cccebe5cf1b32b1
SHA256

e259f0e7a614e0d347c9cf7fb8249a5126f0e6f2bd74b03b05642b845a3e4dbb
SHA512

05eda52183798b7ddcb9c11e486e1706e64dd558d2267ec5ba577f50ed18f31c5f298eb9e19828a6f5051d268d14f3ca2674912b374fcb76d6ac75e540fdeba5
SSDEEP

1536:9JypMXT98WnXCapjPwHT2meQBvALHlTadN6ct:9J1T9vVPqTFDBvAjluv6

Score

N/A

Malware Config

Signatures

Files

e259f0e7a614e0d347c9cf7fb8249a5126f0e6f2bd74b03b05642b845a3e4dbb
.exe windows x86

79279d2cf4bef07b664082b428392225

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

kernel32

WriteConsoleW
GetConsoleOutputCP
HeapFree
GetProcessHeap
GetLastError
GetConsoleScreenBufferInfo
GetFileType
GetStdHandle
SetConsoleTextAttribute
HeapAlloc
LocalFree
WriteFile
FormatMessageW
GetLocaleInfoW
GetModuleHandleW
GetModuleFileNameW
ReadConsoleW
ReadConsoleInputW
MultiByteToWideChar
ReadFile
SetConsoleMode
GetConsoleMode
FindClose
FindNextFileW
FindFirstFileW
SystemTimeToFileTime
FreeLibrary
LoadLibraryW
GetTempPathW
CloseHandle
CreateFileW
SetThreadUILanguage
DeleteFileW
CopyFileW
FileTimeToSystemTime
HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

msvcrt

__wgetmainargs
_cexit
_exit
_XcptFilter
_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
?terminate@@YAXXZ
_controlfp
wcsncmp
_vsnwprintf
_wcsicmp
fwprintf
wprintf
_wcslwr
exit
_wtoi
fclose
wcstok
fgetws
_wfopen
memset
_wcsnicmp
wcstod
_ftol2
memcpy
wcsstr
_wsplitpath_s
_wmakepath_s
wcschr
_getmbcp

ole32

StringFromGUID2

user32

LoadStringW
CharToOemW

pdh

PdhRelogW
PdhGetLogFileTypeW
PdhOpenQueryH
PdhGetDataSourceTimeRangeH
PdhCloseLog
PdhBindInputDataSourceW
PdhEnumObjectItemsHW
PdhValidatePathExW
PdhParseCounterPathW
PdhMakeCounterPathW
PdhExpandWildCardPathHW
PdhEnumMachinesHW
PdhEnumObjectsHW
PdhAddCounterW

version

VerQueryValueW
GetFileVersionInfoExW
GetFileVersionInfoSizeExW

rpcrt4

UuidCreate

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bxrsnuv
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

79279d2cf4bef07b664082b428392225

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

ole32

user32

pdh

version

rpcrt4

Sections

.text Size: 29KB - Virtual size: 29KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 29KB - Virtual size: 30KB

bxrsnuv Size: - Virtual size: 4KB

.text
Size: 29KB - Virtual size: 29KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 29KB - Virtual size: 30KB

bxrsnuv
Size: - Virtual size: 4KB