1e896b262517d6c17bb35558d3e03dc6c138b22ca57c9f7d6b070b58b6daf019

General

Target

1e896b262517d6c17bb35558d3e03dc6c138b22ca57c9f7d6b070b58b6daf019
Size

35KB
MD5

689fb7bfdc1d6df2e35b7d8ab5419224
SHA1

e5c8cbd77d4fd5e8828a7f1566d44dcb16ce00bf
SHA256

1e896b262517d6c17bb35558d3e03dc6c138b22ca57c9f7d6b070b58b6daf019
SHA512

506c7686e00160e3800629044232188c9f1fcfb0dba955f891ba7086e8eac5223777880a25f3de19b60a73394c294aba2ee1e6120090ab742e55d688bf02ddee
SSDEEP

768:hOsR/cvH5Vez9LsLzzDx2ZIqCEVVtnrXTLnNWgacpWLnEIYpI:AnvHjmWfnsNVhrXiLB

Score

N/A

Malware Config

Signatures

Files

1e896b262517d6c17bb35558d3e03dc6c138b22ca57c9f7d6b070b58b6daf019
.exe windows x86

256cd8cedfd4fcb3bc9db32e27e5923a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

user32

CreateWindowExW
DefWindowProcW
RegisterClassExW
GetDesktopWindow
SetForegroundWindow

msvcrt

_wcmdln
_except_handler4_common
?terminate@@YAXXZ
_controlfp
__set_app_type
__p__fmode
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_wcsicmp
memset
__p__commode
__setusermatherr
_amsg_exit
_initterm

shell32

CommandLineToArgvW

pcaui

PcaLaunchApplicationWithConsent
PcaPersistSettingsAndLaunchApplication

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bgopsqy
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

256cd8cedfd4fcb3bc9db32e27e5923a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcrt

shell32

pcaui

Sections

.text Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 896B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 27KB - Virtual size: 28KB

bgopsqy Size: - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 896B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 27KB - Virtual size: 28KB

bgopsqy
Size: - Virtual size: 4KB