b4817212eaaf6d608a62bddf7b177e254ff9c6170d90f5dcefadbdf174d3a134

Sharing

Copy URL Twitter E-mail

General

Target

b4817212eaaf6d608a62bddf7b177e254ff9c6170d90f5dcefadbdf174d3a134
Size

73KB
MD5

4a887422c3f08f6ef905b8ae5b0e8320
SHA1

eb996daa24d41ab506193c0bd8a7dae7e628af5f
SHA256

b4817212eaaf6d608a62bddf7b177e254ff9c6170d90f5dcefadbdf174d3a134
SHA512

216a4467a2d86d8b60a5c3427e3f1e25a4c0f0f5690d9f8a743f835d1143467532fe41697b4718b61f08e19c990e555d2cc3872bc201bc5836de1eea964d3c76
SSDEEP

1536:V9tzJvjb4fR0RDoaqK048uVkclPsEVs6+IMnIPF0UxKnohg/:zU8Do0ECkcm0s6ZW4F0YKoK

Score

N/A

Malware Config

Signatures

Files

b4817212eaaf6d608a62bddf7b177e254ff9c6170d90f5dcefadbdf174d3a134
.exe windows x86

35799ed6badbcbd7b2935dec46e515c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LookupPrivilegeValueW
OpenProcessToken
EventRegister
EventUnregister
EventWrite
AdjustTokenPrivileges

kernel32

GetConsoleMode
GetFileType
CloseHandle
GetLastError
GetCurrentProcess
CompareStringW
LocalFree
LocalAlloc
WideCharToMultiByte
WriteConsoleW
GetModuleHandleW
GetStdHandle
SetThreadPreferredUILanguages
GetConsoleOutputCP
HeapSetInformation
FormatMessageW
SearchPathW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
UnmapViewOfFile
FreeLibrary
GetLocaleInfoW
GetVersionExW
CreateFileW
CreateFileMappingW
MapViewOfFile
LoadLibraryExW
SetLastError
GetSystemDirectoryW
FindResourceExW
LoadResource
LockResource
GetSystemTime
GetTimeZoneInformation
GetDynamicTimeZoneInformation
EnterCriticalSection
LeaveCriticalSection
CompareStringOrdinal
DeleteCriticalSection
InitializeCriticalSection
RegQueryValueExW
IsTimeZoneRedirectionEnabled
InterlockedExchange
Sleep
InterlockedCompareExchange
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsValidLocale
RegEnumKeyExW
RegCloseKey
SystemTimeToFileTime
FileTimeToSystemTime
SetDynamicTimeZoneInformation
GetLocalTime
RegOpenKeyExW

msvcrt

_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_wsetlocale
_wcsicmp
memset
wprintf
??2@YAPAXI@Z
_vsnwprintf
_itow_s
_wtoi
wcschr
wcsncmp
_wcsnicmp
memcpy
bsearch

user32

LoadStringW

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

35799ed6badbcbd7b2935dec46e515c5

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

Sections

.text Size: 37KB - Virtual size: 37KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 30KB - Virtual size: 31KB

.text
Size: 37KB - Virtual size: 37KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 30KB - Virtual size: 31KB