5accfcf3824173f6f9095dac78b2a2f6bd89feb01cb6ad519d4d256572afeb16

Sharing

Copy URL Twitter E-mail

General

Target

5accfcf3824173f6f9095dac78b2a2f6bd89feb01cb6ad519d4d256572afeb16
Size

703KB
MD5

e0758bb6e2026184b77c9888b02caf28
SHA1

43d4d3de17bbd19fa4a387faaab2d9f403a523a3
SHA256

5accfcf3824173f6f9095dac78b2a2f6bd89feb01cb6ad519d4d256572afeb16
SHA512

a7e3cc488277295b472eb9f6e0913e0453e582a4c0aabfd600fd77fcef1ea4e2fdfa6e25d55fa83b847eb213f9262c8006ee3416eb086f9327dd7a67f7a1847e
SSDEEP

12288:hZrC8Loo5Hq8rHfsdkIO+zpgO/pKkCpjgrPwe4prdPLwJZKLYEd:ue5Pb0dkmpgmKkCI4jPkJYL7d

Score

N/A

Malware Config

Signatures

Files

5accfcf3824173f6f9095dac78b2a2f6bd89feb01cb6ad519d4d256572afeb16
.exe windows x86

841adad99bd2fad5fbbbde922245181c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
LoadResource
HeapAlloc
GetProcessHeap
HeapFree
WideCharToMultiByte
MultiByteToWideChar
ReadFile
SetFilePointer
SetFileAttributesW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetProcAddress
LoadLibraryExW
ExpandEnvironmentStringsW
lstrlenW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
CreateFileW
DeleteFileW
lstrcmpiW
CreateDirectoryW
GetTickCount
FindClose
FindNextFileW
FindFirstFileW
GetModuleFileNameW
MoveFileExW
GetLastError
EnumResourceNamesW
GetTempPathW
FindFirstFileExW
SetProcessWorkingSetSize
GetCurrentProcess
ExitProcess
GetModuleHandleW
LocalFree
GetCommandLineW
WriteFile
CloseHandle
SizeofResource
RemoveDirectoryW
FindResourceW
GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
Sleep
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

advapi32

RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW

shell32

CommandLineToArgvW

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21.7MB - Virtual size: 21.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

841adad99bd2fad5fbbbde922245181c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shell32

Sections

.text Size: 41KB - Virtual size: 41KB

.data Size: 3KB - Virtual size: 5KB

.rsrc Size: 21.7MB - Virtual size: 21.7MB

.text
Size: 41KB - Virtual size: 41KB

.data
Size: 3KB - Virtual size: 5KB

.rsrc
Size: 21.7MB - Virtual size: 21.7MB