d51835a7d0cbb73eb7f056e27b55c8252a508eafd4267175dba702ee4470513a

General

Target

d51835a7d0cbb73eb7f056e27b55c8252a508eafd4267175dba702ee4470513a
Size

801KB
MD5

7352c0f8227cc4d04693d7f904dc722b
SHA1

d524dee50ebd006997c2a8910948c36b0208a69c
SHA256

d51835a7d0cbb73eb7f056e27b55c8252a508eafd4267175dba702ee4470513a
SHA512

1c77b3d0567c3f8713bbda734d47a12a8227caee6316a2dc51d9d732123fced62a60c0e5ecf7643b801abd7ca9001bea8ac96721611c17dfb497e6525677d244
SSDEEP

12288:7kJtJiULMtmqVYOBGSI0YUr+xIV8LFO3xTEYP2IPA4SfHMRAhQ47IN/3Uqg:wLiUAUXOMS5YpxIqZOhgYePXe4S3Uq

Score

N/A

Malware Config

Signatures

Files

d51835a7d0cbb73eb7f056e27b55c8252a508eafd4267175dba702ee4470513a
.exe windows x86

58b2f0c14ee31ad7191c4b965b31e0d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteFileA
LoadLibraryW
CreateEventW
GetDriveTypeA
SetLastError
CreateEventW
GetProcessHeap
GetCurrentThread
SuspendThread
TlsGetValue
GetStartupInfoA
FindAtomW
GetProcessVersion
VirtualProtect
GetPrivateProfileSectionA
CreateEventW
GetStringTypeW
ResumeThread
lstrlenA
GetVolumePathNameA
HeapFree

clbcatq

DllGetClassObject
CheckMemoryGates
ComPlusMigrate
SetupOpen
ComPlusMigrate
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
SetupOpen
CheckMemoryGates
SetupOpen
CheckMemoryGates
DllGetClassObject

gpedit

DllCanUnloadNow
BrowseForGPO
DllGetClassObject
ExportRSoPData

Sections

.text
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 795KB - Virtual size: 795KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

58b2f0c14ee31ad7191c4b965b31e0d5

Headers

File Characteristics

Imports

kernel32

clbcatq

gpedit

Sections

.text Size: 1024B - Virtual size: 960B

.data Size: 3KB - Virtual size: 11KB

.rdata Size: 512B - Virtual size: 1.4MB

.rsrc Size: 795KB - Virtual size: 795KB

.orpc Size: 512B - Virtual size: 4KB

.text
Size: 1024B - Virtual size: 960B

.data
Size: 3KB - Virtual size: 11KB

.rdata
Size: 512B - Virtual size: 1.4MB

.rsrc
Size: 795KB - Virtual size: 795KB

.orpc
Size: 512B - Virtual size: 4KB