9ac4f0fb72106de054f25f0368e76c8dff8234fa837a29629ea4a925f9723232

General

Target

9ac4f0fb72106de054f25f0368e76c8dff8234fa837a29629ea4a925f9723232
Size

408KB
MD5

6f3c1757d6c2ecac50cf6edc678b3e1f
SHA1

cad388cd8807de3920e6b95cf2322ed1e9138363
SHA256

9ac4f0fb72106de054f25f0368e76c8dff8234fa837a29629ea4a925f9723232
SHA512

7600325d1f80cfa84c497825fc55060bd93b792e2f22035de86f05d5769db0c344d80b0e63a1b3762ff7eebcc0e9cca2815c974b03262f281b43222a15f462e8
SSDEEP

12288:NbqfBlvVwfiwKQOQ2QreZ82Bt+HvsVW1FFGOg:NbqfLVXswkcsHOWP8O

Score

N/A

Malware Config

Signatures

Files

9ac4f0fb72106de054f25f0368e76c8dff8234fa837a29629ea4a925f9723232
.exe windows x86

ab1a12607f150345dc3231882a8cbd46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetLastError
GetStringTypeW
LoadLibraryW
TlsGetValue
FindAtomW
HeapFree
CreateEventW
GetPrivateProfileSectionA
GetProcessHeap
GetCurrentThread
GetStartupInfoA
GetDriveTypeA
GetProcessVersion
VirtualProtect
lstrlenA
DeleteFileA
CreateEventW
SuspendThread
GetVolumePathNameA
CreateEventW
ResumeThread

clbcatq

ComPlusMigrate
ComPlusMigrate
CheckMemoryGates
DllGetClassObject
SetupOpen
SetupOpen
DllGetClassObject
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
SetupOpen
CheckMemoryGates

gpedit

DllCanUnloadNow
BrowseForGPO
DllGetClassObject
ExportRSoPData

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 401KB - Virtual size: 401KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ab1a12607f150345dc3231882a8cbd46

Headers

File Characteristics

Imports

kernel32

clbcatq

gpedit

Sections

.text Size: 1024B - Virtual size: 768B

.data Size: 3KB - Virtual size: 11KB

.rdata Size: 512B - Virtual size: 472KB

.rsrc Size: 401KB - Virtual size: 401KB

.orpc Size: 512B - Virtual size: 4KB

.text
Size: 1024B - Virtual size: 768B

.data
Size: 3KB - Virtual size: 11KB

.rdata
Size: 512B - Virtual size: 472KB

.rsrc
Size: 401KB - Virtual size: 401KB

.orpc
Size: 512B - Virtual size: 4KB