02c882ef8f0149d17d20d98d99d044f755f0312db77fe8648adc08bfdb216933

General

Target

02c882ef8f0149d17d20d98d99d044f755f0312db77fe8648adc08bfdb216933
Size

1016KB
MD5

6a8cb1f97616a559e2cebadf767b3651
SHA1

7761d9d681df49d435716f35e7b1cfa02bb9a3a9
SHA256

02c882ef8f0149d17d20d98d99d044f755f0312db77fe8648adc08bfdb216933
SHA512

53976825e1fe5c31e249fd9c01796fda674c7a89821c6fbd9e9ec9f79522f9cc71ded4d815adb1560e0fb755ee502292db7626913df36cefb6cfd96fd93bd323
SSDEEP

12288:FAcW2jG/qS73cM9WQ/zDSUZmXvqFQdrF2888888888888W888888888883VR8u:SKG/qS7MM9WQ/vFQdru

Score

N/A

Malware Config

Signatures

Files

02c882ef8f0149d17d20d98d99d044f755f0312db77fe8648adc08bfdb216933
.exe windows x86

cd1016e52659abe1a98a7841c81f8d7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExW
RegCloseKey

kernel32

lstrcmpA
GetCommandLineW
GetModuleHandleA
GetProcAddress
LoadLibraryW
Sleep
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
WideCharToMultiByte
GetStartupInfoW
GetVersion
ExitProcess
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
HeapFree
HeapReAlloc
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetModuleFileNameA
HeapSize
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
SetFilePointer
FlushFileBuffers
CloseHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetStringTypeA
GetStringTypeW
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
ReadFile
GetLocaleInfoW
GetACP
GetOEMCP
SetEnvironmentVariableA

Sections

.text
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 900KB - Virtual size: 896KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd1016e52659abe1a98a7841c81f8d7a

Headers

File Characteristics

Imports

advapi32

kernel32

Sections

.text Size: 80KB - Virtual size: 78KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 20KB - Virtual size: 26KB

.rsrc Size: 900KB - Virtual size: 896KB

.text
Size: 80KB - Virtual size: 78KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 20KB - Virtual size: 26KB

.rsrc
Size: 900KB - Virtual size: 896KB