9cc90cf43b86e8733991a516b916302156cdc9f90d946bcd5f954f0116590051

Sharing

Copy URL

Twitter E-mail

General

Target

9cc90cf43b86e8733991a516b916302156cdc9f90d946bcd5f954f0116590051
Size

327KB
MD5

7c199cb920310b8eabd37c5dc92c7160
SHA1

9166f31b8142c712e3eb358306a6b8599b642272
SHA256

9cc90cf43b86e8733991a516b916302156cdc9f90d946bcd5f954f0116590051
SHA512

c47e693bcf931cf83c301c3eff6e5268ae406be00d4a20c3c12ec298aa734359178c0e8dc3b865e97a71a56bd44a9245b8fbdb41573c94e8fa8ae64adb8982ba
SSDEEP

6144:FKwKm6Vr1i8IzPOAI5gF+ZINKdsGKXtRDn/peq/u4:8NV5APOj5gFoINKds7tRsP4

Score

N/A

Malware Config

Signatures

Files

9cc90cf43b86e8733991a516b916302156cdc9f90d946bcd5f954f0116590051
.exe windows x86

d10de4d74625b59e8e0abf32256f2dc1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProcess
Sleep
CopyFileW
GetExitCodeProcess
TerminateProcess
ReadFile
CreateFileW
GetTickCount
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
OpenEventW
CloseHandle
GetModuleHandleW
SetEvent
WaitForSingleObject
SetDllDirectoryW
CreateProcessW
GetFileSize
GetModuleFileNameW
LocalFree
LocalAlloc
LoadLibraryW
DeleteCriticalSection
EnterCriticalSection
GetProcAddress
LeaveCriticalSection
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LoadLibraryExW
GetLastError
FreeLibrary
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
WideCharToMultiByte
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
HeapFree
HeapAlloc
RemoveDirectoryW
DeleteFileW
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RaiseException
GetCPInfo
RtlUnwind
LCMapStringW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapSize
ExitProcess
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetLocaleInfoW
HeapCreate
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
FlushFileBuffers

advapi32

CloseEventLog
RegisterTraceGuidsW
RegCloseKey
ClearEventLogW
ControlService
GetTraceEnableLevel
RegOpenKeyExW
QueryServiceStatusEx
UnregisterTraceGuids
StartServiceW
GetTraceLoggerHandle
RegQueryValueExW
GetTraceEnableFlags
OpenServiceW
OpenEventLogW
OpenSCManagerW
CloseServiceHandle
TraceEvent
RegOpenKeyW

shell32

SHGetFolderPathW
CommandLineToArgvW

shlwapi

PathRemoveFileSpecW

Sections

.text
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d10de4d74625b59e8e0abf32256f2dc1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shell32

shlwapi

Sections

.text Size: 206KB - Virtual size: 205KB

.rdata Size: 41KB - Virtual size: 41KB

.data Size: 8KB - Virtual size: 23KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 21KB - Virtual size: 21KB

.text
Size: 206KB - Virtual size: 205KB

.rdata
Size: 41KB - Virtual size: 41KB

.data
Size: 8KB - Virtual size: 23KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 21KB - Virtual size: 21KB