bd186d91c33764fb5b3aa44f6777baad32897874f2c9976b5290bdfc3b2c7389

General

Target

bd186d91c33764fb5b3aa44f6777baad32897874f2c9976b5290bdfc3b2c7389
Size

42KB
MD5

7c79b05f804846203f92c7d8950a37c0
SHA1

6521993436d97a8f8c693a326e236793dd335b64
SHA256

bd186d91c33764fb5b3aa44f6777baad32897874f2c9976b5290bdfc3b2c7389
SHA512

3dbec6a1a08ef1b35d3d09de066e7d28f13469fd387ce77a6d45b4812403500e2402a03b9ca8842f1cb82d1e65f80d96fc9a2a01d3d7a5d9e2d953c24a3dc3dd
SSDEEP

768:ju2dKvZAXb3QdDuCz1i14yXaN0P/Icy8nIOcoq7:j9aQ8dhYz9P2O

Score

N/A

Malware Config

Signatures

Files

bd186d91c33764fb5b3aa44f6777baad32897874f2c9976b5290bdfc3b2c7389
.exe windows x86

99d13af39772c941fe737a6d21b77a26

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

kernel32

ExpandEnvironmentStringsA
FreeLibrary
GetProcAddress
LoadLibraryA
SetProcessDEPPolicy
HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
UnhandledExceptionFilter
InterlockedExchange

msvcrt

__set_app_type
?terminate@@YAXXZ
_except_handler4_common
_controlfp
__p__fmode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
memset
_vsnprintf
__p__commode

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zvtivvj
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

99d13af39772c941fe737a6d21b77a26

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 892B

.rsrc Size: 7KB - Virtual size: 7KB

.reloc Size: 27KB - Virtual size: 28KB

zvtivvj Size: - Virtual size: 4KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 892B

.rsrc
Size: 7KB - Virtual size: 7KB

.reloc
Size: 27KB - Virtual size: 28KB

zvtivvj
Size: - Virtual size: 4KB