0c2e3dd99e5bb866670fc3ce682dd535a8354b2d829f7705feb6cb46d94ff502

Sharing

Copy URL Twitter E-mail

General

Target

0c2e3dd99e5bb866670fc3ce682dd535a8354b2d829f7705feb6cb46d94ff502
Size

708KB
MD5

6ebcedec107feee043a0c99e8d6e3be0
SHA1

c98d0fc081566a2d3d8deee60d1c0c8c901a5ac2
SHA256

0c2e3dd99e5bb866670fc3ce682dd535a8354b2d829f7705feb6cb46d94ff502
SHA512

a6eb97e9d330c2a1a7ed0e5064ad07c2c67eb85d9b1d0b5ef5efd4a1298d864ecc87818272ca10a6d04c67362516ee904d6da16c3c7495873595f9749be31e7b
SSDEEP

1536:b30qZVqt2mXA+ns10j2pAAh8JigKdJCRyYCSt6dzwTFOP4:bkqZiXBi2Ji/dkt6dzwTcw

Score

N/A

Malware Config

Signatures

Files

0c2e3dd99e5bb866670fc3ce682dd535a8354b2d829f7705feb6cb46d94ff502
.exe windows x86

2d6658a0429c2a38260e44a4f5d5754e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey

kernel32

VirtualAlloc
CloseHandle
CreateFileA
ExpandEnvironmentStringsW
GetProcAddress
HeapCreate
LoadLibraryA
ReadFile
SetEvent
WideCharToMultiByte
GetModuleHandleW
Sleep
ExitProcess
GetLastError
FreeLibrary
GetCommandLineA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
InterlockedExchange
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
RtlUnwind
GetLocaleInfoW
GetLocaleInfoA
HeapAlloc
HeapReAlloc
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA

rpcrt4

RpcNetworkIsProtseqValidW

user32

LoadStringW
WINNLSGetIMEHotkey
GetSysColor

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 313KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2d6658a0429c2a38260e44a4f5d5754e

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

rpcrt4

user32

Sections

.text Size: 81KB - Virtual size: 81KB

.rdata Size: 310KB - Virtual size: 309KB

.data Size: 313KB - Virtual size: 320KB

.text
Size: 81KB - Virtual size: 81KB

.rdata
Size: 310KB - Virtual size: 309KB

.data
Size: 313KB - Virtual size: 320KB