2bef1762cac01704e07dff778ca6f7b5d497f8c7bebd1110e05e6a05262b8a13

General

Target

2bef1762cac01704e07dff778ca6f7b5d497f8c7bebd1110e05e6a05262b8a13
Size

748KB
MD5

6437321dcc5f739442f249de00b283c1
SHA1

6ba5e4f476dcd15abdf74501823a3e5d663a56a5
SHA256

2bef1762cac01704e07dff778ca6f7b5d497f8c7bebd1110e05e6a05262b8a13
SHA512

2eb9e899cfc1960e1ee640309d93e6668ffe69f8f579c9de6e428aa9de555315168ddcfdc20177db0970b259ce5b827600f2d447a4b3013a5b6c0c592a0b36fc
SSDEEP

12288:Ao3tgT0QV7OkSNQcDlbzCBckA/gUtD+KXBursXgLR036rjyoo9dg1wPsWYDO1z:AwtgT0zk+QglfuckA/jtDZursXg+xHT3

Score

N/A

Malware Config

Signatures

Files

2bef1762cac01704e07dff778ca6f7b5d497f8c7bebd1110e05e6a05262b8a13
.exe windows x86

8c9a5b2787db4a2f8e135f11acd68e98

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW

kernel32

HeapAlloc
GetProcessHeap
HeapFree
WideCharToMultiByte
MultiByteToWideChar
ReadFile
WriteFile
CloseHandle
SetFilePointer
CreateFileW
SetFileAttributesW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetProcAddress
LoadLibraryExW
ExpandEnvironmentStringsW
lstrlenW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
RemoveDirectoryW
DeleteFileW
LocalFree
lstrcmpiW
GetCommandLineW
CreateDirectoryW
GetTickCount
FindClose
FindNextFileW
FindFirstFileW
MoveFileExW
GetLastError
EnumResourceNamesW
GetModuleFileNameW
GetTempPathW
FindFirstFileExW
SetProcessWorkingSetSize
GetCurrentProcess
ExitProcess
GetModuleHandleW
FindResourceW
SizeofResource
LockResource
LoadResource

shell32

CommandLineToArgvW

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 660KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8c9a5b2787db4a2f8e135f11acd68e98

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

shell32

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: - Virtual size: 20B

.rsrc Size: 660KB - Virtual size: 660KB

.rdata Size: 72KB - Virtual size: 72KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: - Virtual size: 20B

.rsrc
Size: 660KB - Virtual size: 660KB

.rdata
Size: 72KB - Virtual size: 72KB