f4e73c38efcba93f4b90cc5be09581c8f39781ea465b97a9dd474acfbaff7d88

General

Target

f4e73c38efcba93f4b90cc5be09581c8f39781ea465b97a9dd474acfbaff7d88
Size

311KB
MD5

45f5113b09d5182a69f75dc4f3ec9550
SHA1

591564b49d22cd46db8863bb30b2e1139a33a56e
SHA256

f4e73c38efcba93f4b90cc5be09581c8f39781ea465b97a9dd474acfbaff7d88
SHA512

f72f09bbd7322d1eafc56a71f6b508fac58bdc8c7ae530a03638838e8a5abeed35672e2c44f443865d6ac49f5c7fb4f11a32b999e3c87ce276df11f7602bcf5c
SSDEEP

6144:lRhcmjEoVI4OMXfRu0KN3dMOWUZGupS/J2f4EackTZVOqEb53KJjOggOvMdk6g:Dhcmo6dXsN+OD8Juz9uubpKAgg0gg

Score

N/A

Malware Config

Signatures

Files

f4e73c38efcba93f4b90cc5be09581c8f39781ea465b97a9dd474acfbaff7d88
.exe windows x86

7df79d61c3aaec1ddc6d50877f3a5773

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateEventW
GetCurrentThread
GetPrivateProfileIntW
LoadLibraryW
GetPrivateProfileSectionA
HeapFree
ResumeThread
GetDriveTypeA
GetProcessHeap
lstrlenA
FindAtomA
CreateEventW
GetStringTypeW
SetLastError
DeleteFileA
VirtualProtect
GetProcessVersion
GetVolumePathNameA
TlsGetValue
SuspendThread
CreateEventW

clbcatq

DllGetClassObject
ComPlusMigrate
ComPlusMigrate
CheckMemoryGates
SetupOpen
CheckMemoryGates
DllGetClassObject
SetupOpen
CheckMemoryGates
SetupOpen
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate

gpedit

DllCanUnloadNow
BrowseForGPO
DllGetClassObject
ExportRSoPData

Sections

.text
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 305KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 455B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7df79d61c3aaec1ddc6d50877f3a5773

Headers

File Characteristics

Imports

kernel32

clbcatq

gpedit

Sections

.text Size: 1024B - Virtual size: 928B

.data Size: 2KB - Virtual size: 11KB

.rdata Size: 512B - Virtual size: 352B

.rsrc Size: 305KB - Virtual size: 305KB

.orpc Size: 512B - Virtual size: 455B

.text
Size: 1024B - Virtual size: 928B

.data
Size: 2KB - Virtual size: 11KB

.rdata
Size: 512B - Virtual size: 352B

.rsrc
Size: 305KB - Virtual size: 305KB

.orpc
Size: 512B - Virtual size: 455B