ec799ac2af8cd094abd89e46539ba86ef84d64463c3ac1d6b6661f80837b5c6a

General

Target

ec799ac2af8cd094abd89e46539ba86ef84d64463c3ac1d6b6661f80837b5c6a
Size

209KB
MD5

6ce2c58199d04e9daea073942e92c4f0
SHA1

f2b45c5d8bf42c7cfaf312568c48fe6b6c565a2b
SHA256

ec799ac2af8cd094abd89e46539ba86ef84d64463c3ac1d6b6661f80837b5c6a
SHA512

3144e98ee935d0687bc2e4d7f648bb07394ae54a3091e72f3e9286176a01042ec7b0f89e6a140a775ef8de145ff5e3820b5701eaf9ba9bfa2d5a025ab7600e9f
SSDEEP

6144:6Ql2/M3ewHOOOyeDWrbaJN9+j8JG+oI45rAsNi:6QwM3fbFeir4Kj8JR749+

Score

N/A

Malware Config

Signatures

Files

ec799ac2af8cd094abd89e46539ba86ef84d64463c3ac1d6b6661f80837b5c6a
.exe windows x86

8c1efaa2eed16578dbd7c2ef6d1fa4f7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

schannel

QuerySecurityPackageInfoA
QueryContextAttributesW
QuerySecurityPackageInfoW
QueryContextAttributesA
InitializeSecurityContextW

kernel32

GetLocaleInfoA
FindResourceA
CreateFileA
lstrlenA
GetProcessHeap
GetCurrentProcessId
SetLastError
HeapAlloc
GetCurrentProcess
MultiByteToWideChar
QueryPerformanceCounter
GetOEMCP
HeapFree
CloseHandle
GetTickCount
LoadLibraryW
GetSystemTimeAsFileTime
SystemTimeToFileTime
WideCharToMultiByte
lstrcmpA
SetUnhandledExceptionFilter
GetLocalTime
lstrcpyA

scecli

SceAddToObjectList
SceAnalyzeSystem
SceAddToNameStatusList
SceCloseProfile
SceAppendSecurityProfileInfo
SceBrowseDatabaseTable

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegQueryValueExA

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.odata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jdata
Size: 3KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c1efaa2eed16578dbd7c2ef6d1fa4f7

Headers

File Characteristics

Imports

schannel

kernel32

scecli

advapi32

Sections

.text Size: 109KB - Virtual size: 109KB

.rdata Size: 90KB - Virtual size: 90KB

.odata Size: 512B - Virtual size: 512B

.jdata Size: 3KB - Virtual size: 1.5MB

.tls Size: 512B - Virtual size: 512B

.rcrc Size: 3KB - Virtual size: 3KB

.text
Size: 109KB - Virtual size: 109KB

.rdata
Size: 90KB - Virtual size: 90KB

.odata
Size: 512B - Virtual size: 512B

.jdata
Size: 3KB - Virtual size: 1.5MB

.tls
Size: 512B - Virtual size: 512B

.rcrc
Size: 3KB - Virtual size: 3KB