f4f84f0902eb2beeaae74757053730ab54f421f921ac37ae57002643ae479c78

Sharing

Copy URL Twitter E-mail

General

Target

f4f84f0902eb2beeaae74757053730ab54f421f921ac37ae57002643ae479c78
Size

80KB
MD5

a027af06dc01a8dd1086dec7ab0375e0
SHA1

e12f5681f3cb48f2fe97e3944879c0fb893d39e6
SHA256

f4f84f0902eb2beeaae74757053730ab54f421f921ac37ae57002643ae479c78
SHA512

9d2d8b970acee524057838e79e898a290fee07c0766809810c0afe615e176d8535371bc5d4addfd74c7896cd1b248fb9931180091bbc6e098dfb8ee68c9b561b
SSDEEP

1536:MkGI2+YSaT1wf7Rvbea8S7U2463GwDT5OQjOn1CjQY8ihUeXIeT:M5TrT+s/wDT5tjOEQYDCg

Score

N/A

Malware Config

Signatures

Files

f4f84f0902eb2beeaae74757053730ab54f421f921ac37ae57002643ae479c78
.exe windows x86

199ea21849e99d78144772ae2f090875

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
lstrlenW
FileTimeToSystemTime
FileTimeToLocalFileTime
FindClose
FindFirstFileW
GetFileAttributesW
GetCommandLineW
GetProcAddress
LocalFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetComputerNameW
GetLastError
FormatMessageW
ExitProcess
GetModuleHandleW
GetModuleHandleA
GetLocalTime
CloseHandle
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetCPInfo
Sleep
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LoadLibraryA
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
SetFilePointer
VirtualProtect
GetSystemInfo
ReadFile
FlushFileBuffers
LCMapStringA
LCMapStringW
SetStdHandle
GetLocaleInfoW

advapi32

RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegConnectRegistryW

user32

LoadStringW

userenv

DeleteProfileW

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dumvbnw
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

199ea21849e99d78144772ae2f090875

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

userenv

Sections

.text Size: 45KB - Virtual size: 44KB

.data Size: 3KB - Virtual size: 11KB

.rsrc Size: 31KB - Virtual size: 32KB

dumvbnw Size: - Virtual size: 4KB

.text
Size: 45KB - Virtual size: 44KB

.data
Size: 3KB - Virtual size: 11KB

.rsrc
Size: 31KB - Virtual size: 32KB

dumvbnw
Size: - Virtual size: 4KB