f74cc297ddec0f5c98f1a77cbfe0ab15fd4cf577274d2dbe72de2fea7e173288

General

Target

f74cc297ddec0f5c98f1a77cbfe0ab15fd4cf577274d2dbe72de2fea7e173288
Size

96KB
MD5

91c07c62f997783c1949e3e22fbfd230
SHA1

7ef663490febe03f63af18b80b1fb23f9eeeb8e1
SHA256

f74cc297ddec0f5c98f1a77cbfe0ab15fd4cf577274d2dbe72de2fea7e173288
SHA512

5d0aca90c8b16ba6682ecf4f43b7444b3702ed32649554eb51bb47a589bbd7e4f8cf0db14442d237bda7700f83af75188dfe729405c7c675c41ad346eea28f53
SSDEEP

1536:mXSzVsdBXf2kitrOm9daRIjtVjbewLgvaEGYc0PDQzzhwGWc+X:tAXtitrOm9da+VOugv7GYLOeGW/X

Score

N/A

Malware Config

Signatures

Files

f74cc297ddec0f5c98f1a77cbfe0ab15fd4cf577274d2dbe72de2fea7e173288
.exe windows x86

d9b0cede265e5d96d703592a7b4138a0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
GetStdHandle
MultiByteToWideChar
GetModuleHandleW
FormatMessageW
WriteConsoleW
VerifyVersionInfoW
VerSetConditionMask
LocalFree
LocalAlloc
GetCommandLineW
GetFileAttributesW
FindNextFileW
FindFirstFileW
SetLastError
LoadLibraryW
FreeLibrary
TermsrvAppInstallMode
SetTermsrvAppInstallMode
GetLastError
GetModuleHandleA

user32

LoadStringW

ntdll

RtlAllocateAndInitializeSid
RtlFreeSid
_wcslwr
_wcsnicmp
wcstoul
wcscmp
wcsncpy
wcstol
wcscpy
wcslen
DbgPrint
wcscat
_ultoa
wcschr
memmove

msvcrt

_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_XcptFilter
_exit
_c_exit
_wcsdup
setlocale
fprintf
_iob
malloc
free
vfwprintf
fwprintf
vswprintf

advapi32

RegCloseKey
RegOpenKeyExW
CheckTokenMembership
RegQueryValueExW

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d9b0cede265e5d96d703592a7b4138a0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ntdll

msvcrt

advapi32

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 5KB

.rsrc Size: 84KB - Virtual size: 86KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 5KB

.rsrc
Size: 84KB - Virtual size: 86KB