a13a30114a7bb420fb0d3fb2fe46403d741841be407303321eaf265ab9075d82

General

Target

a13a30114a7bb420fb0d3fb2fe46403d741841be407303321eaf265ab9075d82
Size

209KB
MD5

76bbb71046ee6290bc48ac1041971560
SHA1

c239de2d0f0d7e857600bd0be333dd548b36896c
SHA256

a13a30114a7bb420fb0d3fb2fe46403d741841be407303321eaf265ab9075d82
SHA512

71fe766bd000c5fd55be67337dd1cff59fa10687dd86b8825d309eadbed55e64fed0eb2d0247c82585fe1182e8753b28e1bb35ff6e4cabd02c4f338c91bb3ce4
SSDEEP

6144:6Ql2/M3ewHOOOyeDWrbaJN9+j8JG+oI45rAsNq:6QwM3fbFeir4Kj8JR749W

Score

N/A

Malware Config

Signatures

Files

a13a30114a7bb420fb0d3fb2fe46403d741841be407303321eaf265ab9075d82
.exe windows x86

8c1efaa2eed16578dbd7c2ef6d1fa4f7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

schannel

QuerySecurityPackageInfoA
QueryContextAttributesW
QuerySecurityPackageInfoW
QueryContextAttributesA
InitializeSecurityContextW

kernel32

GetLocaleInfoA
FindResourceA
CreateFileA
lstrlenA
GetProcessHeap
GetCurrentProcessId
SetLastError
HeapAlloc
GetCurrentProcess
MultiByteToWideChar
QueryPerformanceCounter
GetOEMCP
HeapFree
CloseHandle
GetTickCount
LoadLibraryW
GetSystemTimeAsFileTime
SystemTimeToFileTime
WideCharToMultiByte
lstrcmpA
SetUnhandledExceptionFilter
GetLocalTime
lstrcpyA

scecli

SceAddToObjectList
SceAnalyzeSystem
SceAddToNameStatusList
SceCloseProfile
SceAppendSecurityProfileInfo
SceBrowseDatabaseTable

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegQueryValueExA

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.odata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jdata
Size: 3KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c1efaa2eed16578dbd7c2ef6d1fa4f7

Headers

File Characteristics

Imports

schannel

kernel32

scecli

advapi32

Sections

.text Size: 109KB - Virtual size: 109KB

.rdata Size: 90KB - Virtual size: 90KB

.odata Size: 512B - Virtual size: 512B

.jdata Size: 3KB - Virtual size: 1.5MB

.tls Size: 512B - Virtual size: 512B

.rcrc Size: 3KB - Virtual size: 3KB

.text
Size: 109KB - Virtual size: 109KB

.rdata
Size: 90KB - Virtual size: 90KB

.odata
Size: 512B - Virtual size: 512B

.jdata
Size: 3KB - Virtual size: 1.5MB

.tls
Size: 512B - Virtual size: 512B

.rcrc
Size: 3KB - Virtual size: 3KB