5297eaa9945430e036faf768fdbaee4650b4fac80f8691ae6810a3d138682632

Sharing

Copy URL

Twitter E-mail

General

Target

5297eaa9945430e036faf768fdbaee4650b4fac80f8691ae6810a3d138682632
Size

97KB
MD5

7b93b1efa46ab490ea16d9dd3412e7e2
SHA1

62239c8ceab489ecb4d6cbdc1122585400a12b99
SHA256

5297eaa9945430e036faf768fdbaee4650b4fac80f8691ae6810a3d138682632
SHA512

852af0e6d8d5213e8715207fe39cd4f6032f83cc1cbd5bf7d350794af7b31021cbeb68606046ced00864de18acc1d69bd456092a3085aba32101bf2042bf7e94
SSDEEP

3072:jKMw9/VPXTD+cP9GJFxdLGB5YevP7jaeN:mMKccP9Sda/TH7j

Score

N/A

Malware Config

Signatures

Files

5297eaa9945430e036faf768fdbaee4650b4fac80f8691ae6810a3d138682632
.exe windows x86

79279d2cf4bef07b664082b428392225

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

kernel32

WriteConsoleW
GetConsoleOutputCP
HeapFree
GetProcessHeap
GetLastError
GetConsoleScreenBufferInfo
GetFileType
GetStdHandle
SetConsoleTextAttribute
HeapAlloc
LocalFree
WriteFile
FormatMessageW
GetLocaleInfoW
GetModuleHandleW
GetModuleFileNameW
ReadConsoleW
ReadConsoleInputW
MultiByteToWideChar
ReadFile
SetConsoleMode
GetConsoleMode
FindClose
FindNextFileW
FindFirstFileW
SystemTimeToFileTime
FreeLibrary
LoadLibraryW
GetTempPathW
CloseHandle
CreateFileW
SetThreadUILanguage
DeleteFileW
CopyFileW
FileTimeToSystemTime
HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

msvcrt

__wgetmainargs
_cexit
_exit
_XcptFilter
_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
?terminate@@YAXXZ
_controlfp
wcsncmp
_vsnwprintf
_wcsicmp
fwprintf
wprintf
_wcslwr
exit
_wtoi
fclose
wcstok
fgetws
_wfopen
memset
_wcsnicmp
wcstod
_ftol2
memcpy
wcsstr
_wsplitpath_s
_wmakepath_s
wcschr
_getmbcp

ole32

StringFromGUID2

user32

LoadStringW
CharToOemW

pdh

PdhRelogW
PdhGetLogFileTypeW
PdhOpenQueryH
PdhGetDataSourceTimeRangeH
PdhCloseLog
PdhBindInputDataSourceW
PdhEnumObjectItemsHW
PdhValidatePathExW
PdhParseCounterPathW
PdhMakeCounterPathW
PdhExpandWildCardPathHW
PdhEnumMachinesHW
PdhEnumObjectsHW
PdhAddCounterW

version

VerQueryValueW
GetFileVersionInfoExW
GetFileVersionInfoSizeExW

rpcrt4

UuidCreate

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79279d2cf4bef07b664082b428392225

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

ole32

user32

pdh

version

rpcrt4

Sections

.text Size: 29KB - Virtual size: 29KB

.data Size: 61KB - Virtual size: 61KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 29KB - Virtual size: 29KB

.data
Size: 61KB - Virtual size: 61KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB