5d00260655299fb7e23c9382848dc724e33a16c6f29144327fd4d71a47961202

Sharing

Copy URL Twitter E-mail

General

Target

5d00260655299fb7e23c9382848dc724e33a16c6f29144327fd4d71a47961202
Size

137KB
MD5

150845210795fd17571d690d0b3daaf0
SHA1

5fd3b277dfffd7491080df476642b051e8a828c0
SHA256

5d00260655299fb7e23c9382848dc724e33a16c6f29144327fd4d71a47961202
SHA512

fad03a20de17bcb584324f79c5ccc163fd3ed2e3b3e95832f1b7272674d0e0e48387e98f1ecbe6ac7ba0c0849fa64cfa53c4b08571efd43cd3df92bdbff1582e
SSDEEP

1536:U2cyLQee/qzSpZ3r1q6QkjfkQUk8+k6kawM1x8Dkf8dani25imK4c5zGGFPKsIxD:Fc/e7Sp5+1k12b/Af885RK1RIxmIN

Score

N/A

Malware Config

Signatures

Files

5d00260655299fb7e23c9382848dc724e33a16c6f29144327fd4d71a47961202
.exe windows x86

2c3ea4f45ecc29a10d4a6b07d399cda8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumValueW
RegOpenKeyExW
RegCloseKey

kernel32

HeapSetInformation
ExpandEnvironmentStringsW
lstrlenW
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

user32

AllowSetForegroundWindow

msvcrt

_controlfp
_vsnwprintf
memset
__getmainargs
_cexit
_exit
_except_handler4_common
__p__commode
?terminate@@YAXXZ
__set_app_type
__p__fmode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter

ole32

CoInitializeEx
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CoGetMalloc
CoTaskMemFree

shell32

ShellExecuteExW

shlwapi

ord158
ord437
StrTrimW

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bswapxb
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2c3ea4f45ecc29a10d4a6b07d399cda8

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

msvcrt

ole32

shell32

shlwapi

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 888B

.rsrc Size: 98KB - Virtual size: 98KB

.reloc Size: 28KB - Virtual size: 29KB

bswapxb Size: - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 888B

.rsrc
Size: 98KB - Virtual size: 98KB

.reloc
Size: 28KB - Virtual size: 29KB

bswapxb
Size: - Virtual size: 4KB