897cf379fb190cc3a3b0eb6d0e5b0e8d49f4eb14e78503e3e56fe3e2bef82d5b

Sharing

Copy URL Twitter E-mail

General

Target

897cf379fb190cc3a3b0eb6d0e5b0e8d49f4eb14e78503e3e56fe3e2bef82d5b
Size

124KB
MD5

804bd6083acf3d8b25f741b66467b410
SHA1

2336261fd13f13ba081b726b374e9b6b4d529981
SHA256

897cf379fb190cc3a3b0eb6d0e5b0e8d49f4eb14e78503e3e56fe3e2bef82d5b
SHA512

bda72ee882156fec82b418ef0753d7dece054bce692978f33620f9d885b8c0adbc962eae15eba2043772f3c95aeafb5104a3f363970d1205bc68f46fbcd8ddc5
SSDEEP

3072:UrIPIlYC+3Huz4OOOOOOOOOOOOOOOOOOOuq4nZrsdV9WUB:UraR+zl4nZrUj

Score

N/A

Malware Config

Signatures

Files

897cf379fb190cc3a3b0eb6d0e5b0e8d49f4eb14e78503e3e56fe3e2bef82d5b
.exe windows x86

45745bee697dbbf99dfb8411c313ec78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetDriveTypeA
GetLogicalDriveStringsA
MoveFileExA
GetFileAttributesA
GetWindowsDirectoryA
GetCommandLineW
ReadFile
GetFileSize
SetFileAttributesA
GetLastError
LocalAlloc
DeleteFileA
LocalFree
GetModuleFileNameA
FindFirstFileA
FindNextFileA
FindClose
CreateFileA
WriteFile
WinExec
CloseHandle
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
RaiseException

advapi32

CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
OpenSCManagerA
EnumServicesStatusA
OpenServiceA
QueryServiceConfigA
DeleteService
CloseServiceHandle
CryptAcquireContextA

shell32

CommandLineToArgvW

shlwapi

SHGetValueA
SHSetValueA
SHDeleteValueA
StrStrIA
PathFileExistsA

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

riwkagt
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

45745bee697dbbf99dfb8411c313ec78

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

shlwapi

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 79KB - Virtual size: 79KB

riwkagt Size: - Virtual size: 4KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 79KB - Virtual size: 79KB

riwkagt
Size: - Virtual size: 4KB