a98806045894a8ea26f5799dfe3630f03c4f3ad2a1d50ac2d68720389ca6b82f

General

Target

a98806045894a8ea26f5799dfe3630f03c4f3ad2a1d50ac2d68720389ca6b82f
Size

394KB
MD5

7b6f2bd84678b651047e904568215540
SHA1

22698075b19b6ee5d4ecb159149d890401e27c58
SHA256

a98806045894a8ea26f5799dfe3630f03c4f3ad2a1d50ac2d68720389ca6b82f
SHA512

36664b9726a495c9869bb7d4e201b3adaa78f69d7f0e0b90792b6d6a39837790c631663687249ccc97701fd4ae457d9422c8203393cf025136313e99dbea83b3
SSDEEP

12288:NP3DkaIfdyvnRXDKmQ7FNJO4GJ6KAkA1HzwDKQ:NxpmNBO4GJ9Ak4H

Score

N/A

Malware Config

Signatures

Files

a98806045894a8ea26f5799dfe3630f03c4f3ad2a1d50ac2d68720389ca6b82f
.exe windows x86

c82f0a1ba50b973ac02a5c69d101b216

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualProtect
lstrcpyA
GetCurrentDirectoryA
WriteConsoleW
HeapDestroy
GetCommandLineA
GetStdHandle
GetModuleHandleA
DisconnectNamedPipe
DeleteFileA
WriteConsoleW
lstrlenW
GetStartupInfoA
ResumeThread
CreatePipe
WriteConsoleW
GetPriorityClass
GetFileAttributesW
GetProcessHeap
CopyFileA
SetEvent

mmcndmgr

DllRegisterServer
DllUnregisterServer
DllUnregisterServer
DllRegisterServer

shell32

SHGetDiskFreeSpaceA
SHFree
DuplicateIcon
SHGetSettings
ExtractIconA
StrChrA
ShellAboutA
SHGetMalloc
DragAcceptFiles
DragQueryFileA
DragFinish
ShellMessageBoxA
DllUnregisterServer

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 387KB - Virtual size: 888KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impdata
Size: 512B - Virtual size: 195B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c82f0a1ba50b973ac02a5c69d101b216

Headers

File Characteristics

Imports

kernel32

mmcndmgr

shell32

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 264B

.rsrc Size: 387KB - Virtual size: 888KB

.rdata Size: 512B - Virtual size: 177B

.impdata Size: 512B - Virtual size: 195B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 264B

.rsrc
Size: 387KB - Virtual size: 888KB

.rdata
Size: 512B - Virtual size: 177B

.impdata
Size: 512B - Virtual size: 195B