ebd42de802d6e21a033c52feff465396131ae6d6cedf4cf7d6700d5b410b23f7

General

Target

ebd42de802d6e21a033c52feff465396131ae6d6cedf4cf7d6700d5b410b23f7
Size

802KB
MD5

3bacd8e6653c61f22e56f95ffd2144c0
SHA1

d07636e1e450f632083174de1b56cf211ca11327
SHA256

ebd42de802d6e21a033c52feff465396131ae6d6cedf4cf7d6700d5b410b23f7
SHA512

5d46bde23f68fe48c81864a0491c6be3a7dad6ccebe7e13cd93861fd0ae06b444b0260f378c5efe8332796288e3da1fb6e2fb0aa8d3b4eb5586b33848d1a8188
SSDEEP

24576:zlVPlxDZF7tISTQnZsa7nbGeW6STZ/95:zPDDZ81ZL7bXW66l9

Score

N/A

Malware Config

Signatures

Files

ebd42de802d6e21a033c52feff465396131ae6d6cedf4cf7d6700d5b410b23f7
.exe windows x86

9d5a66b325e035414e3968c1185bf3cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FindAtomW
GetVolumePathNameA
GetStartupInfoA
VirtualProtect
GetProcessVersion
TlsGetValue
DeleteFileA
LoadLibraryW
GetPrivateProfileSectionA
GetStringTypeW
HeapFree
ResumeThread
lstrlenA
GetProcessHeap
GetCurrentThread
GetDriveTypeA
SuspendThread
SetLastError
CreateEventW
CreateEventW
CreateEventW

clbcatq

CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
SetupOpen
DllGetClassObject
ComPlusMigrate
ComPlusMigrate
CheckMemoryGates
SetupOpen
CheckMemoryGates
SetupOpen
CheckMemoryGates
DllGetClassObject

gpedit

DllCanUnloadNow
DllGetClassObject
ExportRSoPData
BrowseForGPO

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 795KB - Virtual size: 795KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9d5a66b325e035414e3968c1185bf3cd

Headers

File Characteristics

Imports

kernel32

clbcatq

gpedit

Sections

.text Size: 1024B - Virtual size: 768B

.data Size: 3KB - Virtual size: 11KB

.rdata Size: 512B - Virtual size: 1.4MB

.rsrc Size: 795KB - Virtual size: 795KB

.orpc Size: 512B - Virtual size: 4KB

.text
Size: 1024B - Virtual size: 768B

.data
Size: 3KB - Virtual size: 11KB

.rdata
Size: 512B - Virtual size: 1.4MB

.rsrc
Size: 795KB - Virtual size: 795KB

.orpc
Size: 512B - Virtual size: 4KB