729884983a8ab87b13d4b127a2d8c05ad9e4f0cfdbaac16f2c67ceeb52842e57

General

Target

729884983a8ab87b13d4b127a2d8c05ad9e4f0cfdbaac16f2c67ceeb52842e57
Size

255KB
MD5

763a8dfafef66092829c88eb5a68d130
SHA1

f6005ecc84de7e792eaf546bd9338a87e39076d5
SHA256

729884983a8ab87b13d4b127a2d8c05ad9e4f0cfdbaac16f2c67ceeb52842e57
SHA512

7e886cebacffc3593b1cfe216be29b1b630f0d162d87ccd4daf1c571dbd8bf43abffac8f07fa73e705bdf1ba506b979e777669ba9700eb351baeea063ae51c90
SSDEEP

6144:VZu+hP4XvAypfi+ggdl0X2DprgKMUm/IHp23sBchyhnFuEi6NO:ThoYgfi2l0mdr/uQHp2ahg6NO

Score

N/A

Malware Config

Signatures

Files

729884983a8ab87b13d4b127a2d8c05ad9e4f0cfdbaac16f2c67ceeb52842e57
.exe windows x86

fa75e593b65704eb244848aaf53b14af

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GlobalFindAtomW
GetFileAttributesA
FindFirstFileA
CreateFileA
InterlockedDecrement
RemoveDirectoryA
lstrcmpA
ReadFileEx
GetSystemDefaultLangID
GlobalFree
SetEvent
WaitForSingleObjectEx
GetOEMCP
CreateDirectoryA
FindClose
SetFilePointer
lstrcpynA
SetEndOfFile
WriteFileEx
CompareStringW
QueryPerformanceCounter
DeleteCriticalSection
EnterCriticalSection
LoadLibraryW
GetFileSize
WaitForSingleObject
GetUserDefaultLangID
ReleaseSemaphore
ResetEvent
SetThreadPriority
CloseHandle
CreateThread
OpenEventA
WaitForMultipleObjects
LCMapStringW
FreeLibrary
OpenFileMappingA
MapViewOfFile
lstrlen
InterlockedIncrement
lstrcpynW
VirtualFree
lstrcpyA
GetSystemInfo
lstrcpyn
WriteFile
GlobalAlloc
lstrlenW
GetDiskFreeSpaceA
OutputDebugStringA
GetCPInfo
lstrlenA
ReadFile
ReleaseMutex
UnmapViewOfFile
LeaveCriticalSection
GetCurrentProcessId
GetEnvironmentStringsW
GetProcAddress
GetModuleFileNameA
GetExitCodeThread
OpenSemaphoreA
CreateSemaphoreA
FindNextFileA
GetUserDefaultLCID
GetLastError
GetEnvironmentStringsA
OpenMutexA

advapi32

SetSecurityDescriptorDacl
ReportEventA
GetLengthSid
AllocateAndInitializeSid
RegDeleteKeyA
RegSetValueExA
DeregisterEventSource
RegQueryValueExA
RegDeleteValueA
RegisterEventSourceA
FreeSid
RegCloseKey
InitializeAcl
RegCreateKeyExA
RegOpenKeyExA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 238KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa75e593b65704eb244848aaf53b14af

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 2KB

.rsrc Size: 238KB - Virtual size: 237KB

.reloc Size: 512B - Virtual size: 300B

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 238KB - Virtual size: 237KB

.reloc
Size: 512B - Virtual size: 300B