1ed690f8a41a3ce6e3e4c09a34da23df70f6c59a66ddbbd2c4a03ec4a2696fd7

Sharing

Copy URL Twitter E-mail

General

Target

1ed690f8a41a3ce6e3e4c09a34da23df70f6c59a66ddbbd2c4a03ec4a2696fd7
Size

207KB
MD5

6aefb2a1438eed74f729854f7c6ae540
SHA1

13a16f21f853b940c85f5dd0dabe04603866bead
SHA256

1ed690f8a41a3ce6e3e4c09a34da23df70f6c59a66ddbbd2c4a03ec4a2696fd7
SHA512

d066c7f791cba53e7655dbf0ec3d35efe0fc76e808448209f6b912d95980fabe07c09e1019ca7d8a579d989285268536188b30ccf404cfd3032283fe179a0e8b
SSDEEP

6144:r93saiBNbEPAIpPge/vAcBalgWXgb4bpRI9ULT4t4xhfJoKuCkJ0:rywPbpPgenAzCWvbvSvt

Score

N/A

Malware Config

Signatures

Files

1ed690f8a41a3ce6e3e4c09a34da23df70f6c59a66ddbbd2c4a03ec4a2696fd7
.exe windows x86

677e4356328d1b327de320b224140757

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadStringW

utildll

TestUserForAdmin

regapi

RegGetMachinePolicy

ntdll

_wcsnicmp
wcstoul
wcscmp
VerSetConditionMask
wcsncpy
wcstol
wcscat
_ultoa
wcschr
wcscpy
wcslen
_wcslwr
memmove

msvcrt

_exit
_XcptFilter
_cexit
exit
__initenv
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_c_exit
_except_handler3
fwprintf
vswprintf
vfwprintf
free
malloc
_iob
fprintf
setlocale
_wcsdup
__getmainargs

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW

kernel32

GetCommandLineW
LocalAlloc
LocalFree
VerifyVersionInfoW
GetFileAttributesW
FormatMessageW
GetModuleHandleW
MultiByteToWideChar
GetStdHandle
GetFileType
WriteConsoleW
SetLastError
LoadLibraryW
GetLastError
FreeLibrary
lstrcmpW
FindNextFileW
FindFirstFileW
GetModuleHandleA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 171KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

677e4356328d1b327de320b224140757

Headers

DLL Characteristics

File Characteristics

Imports

user32

utildll

regapi

ntdll

msvcrt

advapi32

kernel32

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 4KB

.rsrc Size: 3KB - Virtual size: 2KB

.data Size: 171KB - Virtual size: 284KB

.data Size: 21KB - Virtual size: 21KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 3KB - Virtual size: 2KB

.data
Size: 171KB - Virtual size: 284KB

.data
Size: 21KB - Virtual size: 21KB