a1d074b414f1778cd297abf2a3b9cf8843aa6802cd81386f04cefb6c5975fed4

Sharing

Copy URL Twitter E-mail

General

Target

a1d074b414f1778cd297abf2a3b9cf8843aa6802cd81386f04cefb6c5975fed4
Size

134KB
MD5

92033b0c37bcbe22c9861966303809f0
SHA1

5ea988b7cee4b90cecb1c1b3af02eefe37e1a002
SHA256

a1d074b414f1778cd297abf2a3b9cf8843aa6802cd81386f04cefb6c5975fed4
SHA512

72359a70b1970ad85a24a15f1dfa6b3443faff82943c87493d549a12e76c5436348a62c3a8763db645309211eed134be8c9125bae5b3aa136ea04a182e77a51b
SSDEEP

3072:Pyk58ituA3qQuPsEZCCZo7spmLpoG/EZl2o86HxKKs9:b8iR6LVT3YEE6HxKK

Score

N/A

Malware Config

Signatures

Files

a1d074b414f1778cd297abf2a3b9cf8843aa6802cd81386f04cefb6c5975fed4
.exe windows x86

b712a7803f91e4413ddaa32d52f9cd10

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LocalReAlloc
GetStartupInfoA
GetTickCount
SetEvent
WaitForMultipleObjects
WaitForSingleObject
lstrcpynA
lstrlenA
GetLastError
GetCurrentThreadId
GetCurrentThread
SetEnvironmentVariableW
GetSystemDefaultLangID
GetCurrentProcess
GetProcAddress
FreeLibrary
FormatMessageW
FileTimeToSystemTime
FileTimeToLocalFileTime
EnterCriticalSection
DuplicateHandle
CreateThread
CloseHandle
CreateFileW
GetModuleHandleA
MultiByteToWideChar

user32

LoadCursorA
LoadIconA

gdi32

GetStockObject

advapi32

RegOpenKeyExW
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyW
RegEnumKeyA
RegCreateKeyExW
RegCreateKeyExA
OpenThreadToken
OpenProcessToken
GetUserNameW
GetUserNameA
RegCloseKey
RegSetValueExA
RegSetValueExW
RegQueryValueExW

msvcrt

_XcptFilter
__argc
__argv
__dllonexit
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_ftol
_initterm
_onexit
exit
strncpy
toupper
wcscmp

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdataR9
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdataR8
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdataR7
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdataR6
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdataR5
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdataR4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdataR3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdataR2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b712a7803f91e4413ddaa32d52f9cd10

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

Sections

.text Size: 119KB - Virtual size: 118KB

.text2 Size: 512B - Virtual size: 100B

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 244B

.rdataR9 Size: 1KB - Virtual size: 1KB

.rdataR8 Size: 1KB - Virtual size: 1KB

.rdataR7 Size: 1KB - Virtual size: 1KB

.rdataR6 Size: 1KB - Virtual size: 1KB

.rdataR5 Size: 1KB - Virtual size: 1KB

.rdataR4 Size: 512B - Virtual size: 100B

.rdataR3 Size: 512B - Virtual size: 100B

.rdataR2 Size: 512B - Virtual size: 100B

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 119KB - Virtual size: 118KB

.text2
Size: 512B - Virtual size: 100B

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 244B

.rdataR9
Size: 1KB - Virtual size: 1KB

.rdataR8
Size: 1KB - Virtual size: 1KB

.rdataR7
Size: 1KB - Virtual size: 1KB

.rdataR6
Size: 1KB - Virtual size: 1KB

.rdataR5
Size: 1KB - Virtual size: 1KB

.rdataR4
Size: 512B - Virtual size: 100B

.rdataR3
Size: 512B - Virtual size: 100B

.rdataR2
Size: 512B - Virtual size: 100B

.rsrc
Size: 2KB - Virtual size: 1KB