da5b61cfcc590ad7ef1fe389bba35bb46bba0ea58b42a0ddc5fc717556f16b5f

General

Target

da5b61cfcc590ad7ef1fe389bba35bb46bba0ea58b42a0ddc5fc717556f16b5f
Size

94KB
MD5

03d48f7289beac21365bc023bbecfd14
SHA1

bffd4471ecbed2b9661bb089f4a83d978ee495ac
SHA256

da5b61cfcc590ad7ef1fe389bba35bb46bba0ea58b42a0ddc5fc717556f16b5f
SHA512

77d7777ff104237ee23b2639762af5d7f24bece7aa00b92fa6ea778127db41ebeccf45f5c4d47e38ee59330b7f2c9a347eacd7c9617fbf3d12e8095423814c08
SSDEEP

1536:QK6bKRbCFQvlxknBUYzKMxQt3xmXjlSYFYdlXhf/u3Rlx3vKgFbNIPL5zB0Yaw:wMbCGd6bBxixmXj3FYU3Rl1yg/IT5rp

Score

N/A

Malware Config

Signatures

Files

da5b61cfcc590ad7ef1fe389bba35bb46bba0ea58b42a0ddc5fc717556f16b5f
.exe windows x86

4861ec1315cd005040ddeea96050e05e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyExA
RegSetValueExA

comctl32

InitCommonControls

kernel32

CloseHandle
CreateSemaphoreA
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
GetCommandLineA
GetCurrentProcess
GetEnvironmentVariableA
GetFullPathNameA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTempFileNameA
GetTempPathA
GetVersionExA
GetWindowsDirectoryA
LoadLibraryA
MoveFileExA
RemoveDirectoryA
SetCurrentDirectoryA
SetUnhandledExceptionFilter
Sleep

msvcrt

__getmainargs
__p__environ
__set_app_type
_cexit
_fileno
_fmode
_fpreset
_iob
_mkdir
_rmdir
_setmode
atexit
fclose
fgets
fgetws
fopen
rand
signal
sprintf
srand
strchr
strcpy
time
wcscat
wcscpy
wcslen
wcsncmp

user32

ExitWindowsEx
MessageBoxW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4861ec1315cd005040ddeea96050e05e

Headers

File Characteristics

Imports

advapi32

comctl32

kernel32

msvcrt

user32

Sections

.text Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 40B

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 69KB - Virtual size: 72KB

.text
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 40B

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 69KB - Virtual size: 72KB