b3a20fb967729a451e681272e478f725f30a5dcf027230c8c045a8c89a1f8675

General

Target

b3a20fb967729a451e681272e478f725f30a5dcf027230c8c045a8c89a1f8675
Size

108KB
MD5

968da4fd1a11e008421e813c0a9d9e8e
SHA1

66b8c138a8507f192499966071f224f5d8d54e0a
SHA256

b3a20fb967729a451e681272e478f725f30a5dcf027230c8c045a8c89a1f8675
SHA512

c3bd9ae8292c564e520eff278e06bffdb2f21411f00ec3329f55b81298f5a38f6f11991f36be5a7dfa4133f92b06834dcda4b5c1b183a7a04b0eb947f46f61a7
SSDEEP

1536:PJ9xhEbbpG94e2i2imkmiW86ucnK9JQlw4opANKnDVtr4:vSe2xU2EIw1ANKnptr4

Score

N/A

Malware Config

Signatures

Files

b3a20fb967729a451e681272e478f725f30a5dcf027230c8c045a8c89a1f8675
.exe windows x86

7e13cecacc8d3ed80a94414379e120aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegCreateKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey

kernel32

GetLastError
GetProcAddress
LoadLibraryA
CloseHandle
GetCurrentProcess
MoveFileW
DeleteFileW
GetVersionExA
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetLocaleInfoW
CreateFileA

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7e13cecacc8d3ed80a94414379e120aa

Headers

File Characteristics

Imports

advapi32

kernel32

Sections

.text Size: 76KB - Virtual size: 74KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 8KB - Virtual size: 12KB

.text
Size: 76KB - Virtual size: 74KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 8KB - Virtual size: 12KB