691351538bf30de54b82d1368f12fa69e51d12066c49b14aa0afa387dfe61dea

Sharing

Copy URL Twitter E-mail

General

Target

691351538bf30de54b82d1368f12fa69e51d12066c49b14aa0afa387dfe61dea
Size

92KB
MD5

671441bbbb88622c149a836210afbfe0
SHA1

e248a933739fe781935b926627d384836055c0dc
SHA256

691351538bf30de54b82d1368f12fa69e51d12066c49b14aa0afa387dfe61dea
SHA512

bf275a0673e9a05cbf26fcdb2848d670c7640762a905f7b0a97bd6e8286121b16b4b4e1bc395df82a208e375574f0db4b6850a227a5301ce664ce5d2f2931927
SSDEEP

1536:wJN5tM49Ik/HWKg1A67JfWtrIa0Uy4VtJ0TgcE7sP6J8KzOr/KdrX7JC:wJrSWps7JfMUa0Uy4VtJ0cWy6/KFXd

Score

N/A

Malware Config

Signatures

Files

691351538bf30de54b82d1368f12fa69e51d12066c49b14aa0afa387dfe61dea
.exe windows x86

3a100e97fd3a0e7087f41e3f79e7ad63

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegEnumKeyA
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
IsValidSid
GetTokenInformation
OpenProcessToken

kernel32

CloseHandle
WriteFile
SetFilePointer
CreateFileA
lstrcatA
lstrcpynA
GetEnvironmentVariableA
lstrcpyA
GetFileAttributesA
MoveFileExA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
DeleteFileA
SetFileAttributesA
SystemTimeToFileTime
GetSystemTime
CopyFileA
ExpandEnvironmentStringsA
GetLastError
WaitForSingleObject
CreateProcessA
CreateDirectoryA
MoveFileA
lstrlenA
SetEnvironmentVariableA
GetWindowsDirectoryA
GetCurrentDirectoryA
GetCommandLineA
SetLastError
GetCurrentProcess
GetVersionExA
GetStartupInfoA
ExitProcess
GetModuleHandleA
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
Sleep
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LCMapStringA
MultiByteToWideChar
LCMapStringW
HeapSize
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
RtlUnwind
SetStdHandle
ReadFile
FlushFileBuffers
CompareStringA
GetSystemDefaultLangID

gdi32

TextOutA

user32

ReleaseDC
GetDC
SystemParametersInfoA
LoadKeyboardLayoutA
wsprintfA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

znaynqw
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3a100e97fd3a0e7087f41e3f79e7ad63

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

ole32

version

Sections

.text Size: 54KB - Virtual size: 54KB

.data Size: 36KB - Virtual size: 37KB

znaynqw Size: - Virtual size: 4KB

.text
Size: 54KB - Virtual size: 54KB

.data
Size: 36KB - Virtual size: 37KB

znaynqw
Size: - Virtual size: 4KB