df06a6f24486f49659d7eaf0c119d5f64e35129f9824c6ce3b726b905913b2ca

Sharing

Copy URL Twitter E-mail

General

Target

df06a6f24486f49659d7eaf0c119d5f64e35129f9824c6ce3b726b905913b2ca
Size

100KB
MD5

5547e79b959880d921fe33ee6ec82460
SHA1

a616d651d6061bf0dcca2b18e2bf3acecf4c3fdf
SHA256

df06a6f24486f49659d7eaf0c119d5f64e35129f9824c6ce3b726b905913b2ca
SHA512

a473981eb8a420d8a7ec0cd948ed3a535f2058e9265e15979866cda9baaf8eadc7d67d55e156ed87857c5f58ca79200159cf4340b8def6b6ed6ccab8dacdb45e
SSDEEP

3072:EUgn1WOIfvrc5DIGPWYSe5W/tyCAh92yZsF2aqAD7byzQ:EZWOIOWDe9C0JqMI7us

Score

N/A

Malware Config

Signatures

Files

df06a6f24486f49659d7eaf0c119d5f64e35129f9824c6ce3b726b905913b2ca
.exe windows x86

ab658d2d49eef2b0b605cd5a7dcabe5a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

ShellExecuteExW

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
FreeLibrary
GetProcAddress
LoadLibraryW
GetModuleFileNameW
WaitForSingleObject
GetSystemTimeAsFileTime

shlwapi

PathRemoveFileSpecW

msvcr90

_invalid_parameter_noinfo
??2@YAPAXI@Z
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
wcsncmp
_amsg_exit
memset
_cexit
_exit
_XcptFilter
exit
__winitenv
_initterm
_initterm_e
_configthreadlocale
wcscat_s
_adjust_fdiv
__p__commode
__wgetmainargs
_encode_pointer
__set_app_type
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
wprintf_s
__CxxFrameHandler3
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??3@YAXPAX@Z
__setusermatherr
__p__fmode

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ab658d2d49eef2b0b605cd5a7dcabe5a

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

shell32

msvcp90

kernel32

shlwapi

msvcr90

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 78KB - Virtual size: 80KB

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 78KB - Virtual size: 80KB