7bfde1ed9f74a3abb5aa94da9feef747b1a092f4b22dfe24b6ff9f2363266e9c

General

Target

7bfde1ed9f74a3abb5aa94da9feef747b1a092f4b22dfe24b6ff9f2363266e9c
Size

125KB
MD5

6155b0b8c44fd6c5d6ca2e72c432be50
SHA1

2e862273917643703e8ce11dcfe77e59f16f54fb
SHA256

7bfde1ed9f74a3abb5aa94da9feef747b1a092f4b22dfe24b6ff9f2363266e9c
SHA512

006b67e5f15222ac5654a6f2bc7ae76304f346231e0eabaceac47d5bbd6533641272ca185246ce3199c04d34fb5607f99bc8596d3ca97ad6a4e19955165bc2f9
SSDEEP

3072:Rq9dt3L1TNRvdy89zMbvAylBzQU1//3ida:RUJ914oKQUp/3ida

Score

N/A

Malware Config

Signatures

Files

7bfde1ed9f74a3abb5aa94da9feef747b1a092f4b22dfe24b6ff9f2363266e9c
.exe windows x86

2f8d68df80bbbd9aa0625249cb00abf7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
QueryDosDeviceA
CreateFileA
CloseHandle
GetCurrentProcess
GlobalAlloc
GlobalFree
GetDriveTypeA
OutputDebugStringA
FreeLibrary
LoadLibraryA
GetVersionExA
GetModuleHandleA
GetProcAddress
GetLastError
HeapAlloc
HeapFree
GetCommandLineA
ExitProcess
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers

advapi32

OpenProcessToken
GetTokenInformation
EqualSid
FreeSid
AllocateAndInitializeSid

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2f8d68df80bbbd9aa0625249cb00abf7

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 15KB

.rsrc Size: 76KB - Virtual size: 76KB

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 15KB

.rsrc
Size: 76KB - Virtual size: 76KB