0c5e55df93fce82c642c10656bccee8ba7aac26167b8a9b72b362e4a401c351c

General

Target

0c5e55df93fce82c642c10656bccee8ba7aac26167b8a9b72b362e4a401c351c
Size

46KB
MD5

490c5b25a0b35c075ea6caa372e4912d
SHA1

291f4c90198622396fbb0d5ea485e15069bb17e7
SHA256

0c5e55df93fce82c642c10656bccee8ba7aac26167b8a9b72b362e4a401c351c
SHA512

ecd943dac0a7fba5333400088143ef3f02566ec07b74ebcd1db0d763f0c399809895402db1076070ee02e67622eb3ba043b9d021a4cca3a36a3f1ba70053edea
SSDEEP

768:LRllnnJ4ehfy2tDnD/QCfgMlxnfkFiDD17T1MXC2GsRrg7:LRznJ4QK0H4W3lVplj2GsRr

Score

N/A

Malware Config

Signatures

Files

0c5e55df93fce82c642c10656bccee8ba7aac26167b8a9b72b362e4a401c351c
.exe windows x86

92e76561305f12cd2829065886ce1627

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegGetValueW
RegSetValueExW
RegLoadMUIStringW
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW

kernel32

CloseHandle
GetLastError
GetCurrentProcess
GetSystemDirectoryW
GetDynamicTimeZoneInformation
GetLocalTime
SetDynamicTimeZoneInformation
ExitProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_except_handler4_common
_controlfp
__setusermatherr
_amsg_exit
_initterm
_XcptFilter
_exit
_cexit
__getmainargs
memset
_wcsnicmp
wprintf
_vsnwprintf
exit

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gwditag
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

92e76561305f12cd2829065886ce1627

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

Sections

.text Size: 15KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 28KB - Virtual size: 29KB

gwditag Size: - Virtual size: 4KB

.text
Size: 15KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 28KB - Virtual size: 29KB

gwditag
Size: - Virtual size: 4KB