5bf7be9b1ed0fe9dacd9cf037c02b226423ae254c57d5be1b726851d027f31df

Sharing

Copy URL Twitter E-mail

General

Target

5bf7be9b1ed0fe9dacd9cf037c02b226423ae254c57d5be1b726851d027f31df
Size

69KB
MD5

62aa9fdcd7ef380ee523c4e333550c90
SHA1

fb4a6dfa1abfe580c3d6b19f454b876e5c0b0dc5
SHA256

5bf7be9b1ed0fe9dacd9cf037c02b226423ae254c57d5be1b726851d027f31df
SHA512

c172d41865f4c864637c477763feed73fdd2a8bdfed380e5a5e5251675263598c3c3a63e9cba8ac4e8bf69339b4cde66a8edbadca70a314e3a88686c5f6eab01
SSDEEP

1536:f3rqec/HqmxNm7cqYhmxRXd68r4gamPTGmfkQ1dDt:f3Weqprm4qYiw888kQ1dDt

Score

N/A

Malware Config

Signatures

Files

5bf7be9b1ed0fe9dacd9cf037c02b226423ae254c57d5be1b726851d027f31df
.exe windows x86

08ced7e301341bbbf2264dbd84c22f3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrRChrA

advapi32

RegOpenKeyExA
InitializeSecurityDescriptor
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextA
RegCloseKey
RegQueryValueExA
GetUserNameA
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerExA
SetServiceStatus
SetSecurityDescriptorDacl

user32

LoadStringA
CharLowerA
CharUpperA
CharNextA
wvsprintfA

kernel32

GetVolumeInformationA
GetModuleHandleA
CreateThread
LoadLibraryA
GetModuleFileNameA
FreeLibraryAndExitThread
Sleep
GetProcAddress
GetSystemTime
CloseHandle
GetFileTime
CreateFileA
lstrlenA
InterlockedDecrement
SystemTimeToFileTime
WaitForSingleObject
VirtualFree
IsBadReadPtr
GetCurrentProcessId
VirtualAlloc
VirtualProtect
MoveFileExA
OpenFileMappingW
UnmapViewOfFile
ReleaseMutex
DuplicateHandle
GetCurrentProcess
OpenProcess
MapViewOfFileEx
lstrcmpA
InterlockedIncrement
GetVersionExA
lstrlenW
GetStringTypeExA
GetThreadLocale
ReadFile
GetFileSize
FileTimeToSystemTime
GetTickCount
FreeLibrary
GetComputerNameA
GetSystemTimeAsFileTime
CreateEventA
GetLastError
InterlockedExchange
lstrcpynA
GetStringTypeW
ExitProcess
TerminateProcess
RtlUnwind
HeapReAlloc
HeapAlloc
GetCommandLineA
GetVersion
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetEnvironmentVariableA
HeapDestroy
HeapCreate
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA

ole32

CoCreateGuid
StringFromGUID2

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

08ced7e301341bbbf2264dbd84c22f3d

Headers

File Characteristics

Imports

shlwapi

advapi32

user32

kernel32

ole32

Sections

.text Size: 57KB - Virtual size: 56KB

.data Size: 11KB - Virtual size: 12KB

.text
Size: 57KB - Virtual size: 56KB

.data
Size: 11KB - Virtual size: 12KB