f522c77377919c2da56d2dd8d9ca77584d6513d8d14f68662c638aa33fd3239e

Sharing

Copy URL Twitter E-mail

General

Target

f522c77377919c2da56d2dd8d9ca77584d6513d8d14f68662c638aa33fd3239e
Size

121KB
MD5

42948d70345804a40e70a82d6699bda0
SHA1

ced21e3cdce602626daacfa71fa5cf949e931784
SHA256

f522c77377919c2da56d2dd8d9ca77584d6513d8d14f68662c638aa33fd3239e
SHA512

e722a8e0c4f52d5ef84d6fbbbf309c86b79c3308a8369b7569240c346093cfb373839d7ffb5127d4b7ac916f69166c8bfb9f38e9717d65d5886a065ed3e8a15a
SSDEEP

3072:hgj5VrAACebr+AqMX+CMsJ1hgdT9tYJq5c7Y1nHsvAj/rZIBeR44mpWrsTSyXdm8:+j5VcACebr+AqMX+CMsJ1hgdT9tYJq58

Score

N/A

Malware Config

Signatures

Files

f522c77377919c2da56d2dd8d9ca77584d6513d8d14f68662c638aa33fd3239e
.exe windows x86

f7b8cbe869a343f05f6a7a889e7b5a1d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

??1type_info@@UAE@XZ
__CxxFrameHandler3
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_controlfp
_XcptFilter
toupper
_vsnwprintf_s
__RTDynamicCast
memcpy_s
_except_handler4_common
memmove_s
??0exception@@QAE@ABQBD@Z
_exit
_cexit
__wgetmainargs
_callnewh
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
??0exception@@QAE@XZ
malloc
free
_CxxThrowException
wcsstr
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_purecall
wcstol
_wtoi
exit
_ui64tow_s

ntdll

EtwTraceMessage
EtwGetTraceEnableFlags
EtwEventRegister
EtwEventWrite
EtwEventUnregister
RtlNtStatusToDosErrorNoTeb
EtwUnregisterTraceGuids
EtwRegisterTraceGuidsW
EtwGetTraceLoggerHandle
EtwGetTraceEnableLevel

api-ms-win-core-localregistry-l1-1-0

RegDeleteTreeW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegEnumKeyExW

slc

SLGetWindowsInformationDWORD

kernel32

InterlockedDecrement
GetCurrentProcess
TerminateProcess
CreateBoundaryDescriptorW
GetCurrentThreadId
GetTickCount
CreateMutexExW
WaitForSingleObject
HeapSetInformation
SleepEx
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedIncrement
Sleep
InterlockedExchange
LoadLibraryExA
InterlockedCompareExchange
FreeLibrary
AddSIDToBoundaryDescriptor
CreatePrivateNamespaceW
OpenPrivateNamespaceW
DeleteBoundaryDescriptor
GetSystemTimeAsFileTime
UnhandledExceptionFilter
QueryPerformanceCounter
GetProcAddress
DelayLoadFailureHook
LocalFree
GetLastError
CloseHandle
DeviceIoControl
CreateFileW
ClosePrivateNamespace
GetCurrentProcessId
ReleaseMutex

appidapi

AppIDEncodeAttributeString
AppIDFreeAttributeString

rpcrt4

UuidToStringW
UuidFromStringW
RpcStringFreeW

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ywmltkr
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f7b8cbe869a343f05f6a7a889e7b5a1d

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

ntdll

api-ms-win-core-localregistry-l1-1-0

slc

kernel32

appidapi

rpcrt4

Sections

.text Size: 78KB - Virtual size: 78KB

.data Size: 3KB - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 36KB - Virtual size: 37KB

ywmltkr Size: - Virtual size: 4KB

.text
Size: 78KB - Virtual size: 78KB

.data
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 36KB - Virtual size: 37KB

ywmltkr
Size: - Virtual size: 4KB