268bd7fbd431651adae577d3fcad6c9191a29c5cbee1402fca2fb2889e5ddf8b

General

Target

268bd7fbd431651adae577d3fcad6c9191a29c5cbee1402fca2fb2889e5ddf8b
Size

512KB
MD5

66b292dc12a9a5154c5100089c393936
SHA1

28d93f13fc99ab04d3224dddbce31a5f557f8637
SHA256

268bd7fbd431651adae577d3fcad6c9191a29c5cbee1402fca2fb2889e5ddf8b
SHA512

c92459b27337b825ad3660f6f46d5ddf821f0a9c7fdf7fb9bfa62c510d1a307f0523d2a33c6b8217625ad3ef52c6d9a8e9af1d7bb410489afba99628e5baa34a
SSDEEP

6144:1uv7F+ipUOqubAg0HDHJC7GN6GFk93SP3s4YyYzGTGZJG8JT8lDtinb86llOR:a+9J8AJ9I3Nn5G43JT8lg7

Score

N/A

Malware Config

Signatures

Files

268bd7fbd431651adae577d3fcad6c9191a29c5cbee1402fca2fb2889e5ddf8b
.exe windows x86

1f2e828cced8d0d4e66324d602a347db

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

kernel32

GetVersion
GetModuleHandleW
GetProcAddress
ExpandEnvironmentStringsA
LoadLibraryA
MultiByteToWideChar
FreeLibrary
GetVersionExA
VirtualAlloc
SetProcessDEPPolicy
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange

msvcrt

rand_s
??2@YAPAXI@Z
??3@YAXPAX@Z
_XcptFilter
__p__commode
_amsg_exit
__getmainargs
__set_app_type
exit
_exit
_cexit
__p__fmode
_ismbblead
__setusermatherr
_initterm
_acmdln
?terminate@@YAXXZ
_controlfp
_except_handler4_common

iertutil

ord650

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vmp0
Size: 500KB - Virtual size: 1.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1f2e828cced8d0d4e66324d602a347db

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

iertutil

Sections

.text Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 840B

.vmp0 Size: 500KB - Virtual size: 1.6MB

.text
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 840B

.vmp0
Size: 500KB - Virtual size: 1.6MB