634d4fcd40ce3878d1ed9c190015007f7a5e6bbaff389350e7f94c2b36ccef53

General

Target

634d4fcd40ce3878d1ed9c190015007f7a5e6bbaff389350e7f94c2b36ccef53
Size

292KB
MD5

9147b52095fe65c7619fd94481be3e20
SHA1

53ce230446f326c111d8ea9c1778934052cd066c
SHA256

634d4fcd40ce3878d1ed9c190015007f7a5e6bbaff389350e7f94c2b36ccef53
SHA512

e5e8e0123ae0b675099f2497107dca8145d811d3082a092aa15a450fc269fae1b703a19ef68b6000387c95da0a57d7cb0e1ca787b0479ed5d4e6ee8979aedc44
SSDEEP

6144:dNA3Qh7mDOD/Si5vPIWUAT8cZJOLdisZw/kXN4W3Qmh8Z3DyVsL2h:dNC4V/5YWfJOsv/k94W35aZ3XC

Score

N/A

Malware Config

Signatures

Files

634d4fcd40ce3878d1ed9c190015007f7a5e6bbaff389350e7f94c2b36ccef53
.exe windows x86

a589388305c05245d6bd1d24f1c3d0e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreatePipe
lstrcpyA
DeleteFileA
GetPriorityClass
CopyFileA
HeapDestroy
GetProcessHeap
DisconnectNamedPipe
SetEvent
VirtualProtect
WriteConsoleW
GetCommandLineA
GetModuleHandleA
ResumeThread
GetCurrentDirectoryA
WriteConsoleW
GetStartupInfoA
lstrlenW
GetFileAttributesW
WriteConsoleW
GetStdHandle

mmcndmgr

DllUnregisterServer
DllRegisterServer
DllRegisterServer
DllUnregisterServer

shell32

DragFinish
SHFree
ExtractIconA
DllUnregisterServer
DragQueryFileA
SHGetMalloc
ShellMessageBoxA
SHGetDiskFreeSpaceA
SHGetSettings
StrChrA
ShellAboutA
DuplicateIcon
DragAcceptFiles

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 285KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impdata
Size: 512B - Virtual size: 195B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a589388305c05245d6bd1d24f1c3d0e2

Headers

File Characteristics

Imports

kernel32

mmcndmgr

shell32

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 264B

.rsrc Size: 285KB - Virtual size: 284KB

.rdata Size: 512B - Virtual size: 177B

.impdata Size: 512B - Virtual size: 195B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 264B

.rsrc
Size: 285KB - Virtual size: 284KB

.rdata
Size: 512B - Virtual size: 177B

.impdata
Size: 512B - Virtual size: 195B