38880feea69707924122091ae53e26b50c181f5f9601df65664118c7ee799d4c

General

Target

38880feea69707924122091ae53e26b50c181f5f9601df65664118c7ee799d4c
Size

44KB
MD5

09eab6562f47574bb3a6c15f02c8d110
SHA1

04d2f30ce437a5cee82d7ee8aa623b7e5b07d1ac
SHA256

38880feea69707924122091ae53e26b50c181f5f9601df65664118c7ee799d4c
SHA512

75c2a17cf91cbdaf59a876c01265d8792a3914abf832a52d766dd6e908a8dc17c905c5663498a409da7f37f19c5ac0d57dbee10d30aaed3754c4ced718343a98
SSDEEP

768:Aj4Xf75dfhhaR9X6L+EcEMsiYB6J8Ull2JF/i8L6yHvoQaG2g92:GOf75PhajXhEhDB6J8Uli/DuyHgQaG2c

Score

N/A

Malware Config

Signatures

Files

38880feea69707924122091ae53e26b50c181f5f9601df65664118c7ee799d4c
.exe windows x86

ca91db6289589af1cebdea93728d5ecb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExW
RegConnectRegistryW
RegSetValueExW
RegDeleteValueW
RegQueryValueExW
RegCreateKeyExW
RegCloseKey

kernel32

GetLastError
GetModuleHandleW
GetVersionExW
WriteConsoleW
GetFileType
GetStdHandle
FindVolumeClose
FindNextVolumeW
CloseHandle
CreateFileW
FindFirstVolumeW
DeviceIoControl
lstrlenW
GetCommandLineW
HeapSetInformation
SetThreadUILanguage
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

msvcrt

_XcptFilter
_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_exit
_except_handler4_common
_controlfp
?terminate@@YAXXZ
_cexit
_vsnwprintf
memset
_wcsicmp
_wtoi
vfwprintf
setlocale
malloc
exit
wcstok
free
_wcsupr
_iob
__getmainargs

user32

LoadStringW

ntdll

RtlInitUnicodeString
NtOpenFile
NtClose
NtQuerySystemInformation

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ca91db6289589af1cebdea93728d5ecb

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

ntdll

Sections

.text Size: 12KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 28KB - Virtual size: 29KB

.text
Size: 12KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 28KB - Virtual size: 29KB