5d799b24b8a78561d37ac08aedf7c9024b11a2a2baa24348a9a2003f806e713a

Sharing

Copy URL Twitter E-mail

General

Target

5d799b24b8a78561d37ac08aedf7c9024b11a2a2baa24348a9a2003f806e713a
Size

155KB
MD5

4e35df2b41b54d543dc02997dbf6d0c6
SHA1

6d65c9f98126e27559d7cc969d69af5250e81d7e
SHA256

5d799b24b8a78561d37ac08aedf7c9024b11a2a2baa24348a9a2003f806e713a
SHA512

df1ad93881672adc05e3b659806bacceb949e3d9793a4fe3d0d467e94402ef47a81cd381c0fce095df082b59761fc694a916891d2db745c660e00a144e970939
SSDEEP

3072:2zr1NrFclCMF8BNCA6GVafIrjhfPre8wwALf536:2NJ+lCMFysAUKaR3

Score

N/A

Malware Config

Signatures

Files

5d799b24b8a78561d37ac08aedf7c9024b11a2a2baa24348a9a2003f806e713a
.exe windows x86

5a59a0db239c32d900af243fc001acb5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
VirtualAlloc
CreateFileA
LeaveCriticalSection
EnterCriticalSection
ExpandEnvironmentStringsA
GetCurrentThreadId
SetUnhandledExceptionFilter
GetTickCount
QueryPerformanceCounter
SetLastError
LocalFree
FormatMessageA
SetConsoleCtrlHandler
GetLastError
UnhandledExceptionFilter
GetModuleHandleA
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
CreateProcessA
SearchPathA
GetStartupInfoA
GetModuleFileNameW
GetShortPathNameW
lstrcatW
lstrlenW
DeleteFileW
WriteFile
CloseHandle
CreateSemaphoreW
CreateFileW
GetVersionExW

user32

GetSystemMetrics

gdi32

GetStockObject
GetObjectW
SetTextColor
SetBkMode
CreatePen
SelectObject
Polyline
DeleteObject
CreateFontIndirectW

msvcrt

_except_handler3
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_vsnwprintf
__set_app_type
_controlfp
setlocale
mbstowcs

advapi32

RegOpenKeyW
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
OpenProcessToken

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data25
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data24
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data23
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data21
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data20
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data19
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data5
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text14
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.text13
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.text12
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.text6
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.text5
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a59a0db239c32d900af243fc001acb5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

advapi32

Sections

.text Size: 9KB - Virtual size: 9KB

.data25 Size: 512B - Virtual size: 500B

.data24 Size: 512B - Virtual size: 500B

.data23 Size: 512B - Virtual size: 500B

.data21 Size: 512B - Virtual size: 500B

.data20 Size: 512B - Virtual size: 500B

.data19 Size: 512B - Virtual size: 500B

.data5 Size: 114KB - Virtual size: 114KB

.data Size: 2KB - Virtual size: 2KB

.text14 Size: 512B - Virtual size: 12B

.text13 Size: 512B - Virtual size: 16B

.text12 Size: 512B - Virtual size: 16B

.text6 Size: 1KB - Virtual size: 1KB

.text5 Size: 1KB - Virtual size: 1KB

.rsrc Size: 19KB - Virtual size: 18KB

.reloc Size: 1024B - Virtual size: 780B

.text
Size: 9KB - Virtual size: 9KB

.data25
Size: 512B - Virtual size: 500B

.data24
Size: 512B - Virtual size: 500B

.data23
Size: 512B - Virtual size: 500B

.data21
Size: 512B - Virtual size: 500B

.data20
Size: 512B - Virtual size: 500B

.data19
Size: 512B - Virtual size: 500B

.data5
Size: 114KB - Virtual size: 114KB

.data
Size: 2KB - Virtual size: 2KB

.text14
Size: 512B - Virtual size: 12B

.text13
Size: 512B - Virtual size: 16B

.text12
Size: 512B - Virtual size: 16B

.text6
Size: 1KB - Virtual size: 1KB

.text5
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 1024B - Virtual size: 780B