7d8a9f51230ec4a0277aa6c09180a65a34b96949ba970ab85d2603d065fe9627

General

Target

7d8a9f51230ec4a0277aa6c09180a65a34b96949ba970ab85d2603d065fe9627
Size

40KB
MD5

441c5442fe90b60bebd01280c3754db0
SHA1

d9d7bf2444f080073f126a9fbaf2f54c9c91e007
SHA256

7d8a9f51230ec4a0277aa6c09180a65a34b96949ba970ab85d2603d065fe9627
SHA512

1d76e9cde16d81f4526f75d90a18a7b7952bc81a54d4b49ee4e53cdaf3b2bdab4ea7a1f654776d4b080d6f6dca263fe6af6d5a0d9945b0ee3a31b272ccf3b889
SSDEEP

768:vycmKBsIypCAtMEmCkL7jmU48hZa4oxyESu9WOWEym3yILd:vyaXypCzEmbr44aPB9WV0Cy

Score

N/A

Malware Config

Signatures

Files

7d8a9f51230ec4a0277aa6c09180a65a34b96949ba970ab85d2603d065fe9627
.exe windows x86

bd3013f0928145853c0f953840571cca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
__set_app_type
__p__fmode
_controlfp
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p__commode
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit

advapi32

RegDeleteKeyW
RegEnumKeyExW
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW

kernel32

QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoA
GetCommandLineW
CreateMutexW
GetModuleHandleW
WaitForSingleObject
ReleaseMutex
lstrlenW
GlobalFree
GlobalAlloc
lstrcmpiW
CloseHandle

user32

LoadStringW
MessageBoxW
wsprintfW

tapi32

lineRemoveProvider
lineAddProviderW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mgojyfe
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bd3013f0928145853c0f953840571cca

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

user32

tapi32

Sections

.text Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 32KB - Virtual size: 33KB

mgojyfe Size: - Virtual size: 4KB

.text
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 32KB - Virtual size: 33KB

mgojyfe
Size: - Virtual size: 4KB