c9e9b3425ab8413dbeede87bc6b400bc5de84bd70333c1f9f10b737e5f4b3eb9

Sharing

Copy URL Twitter E-mail

General

Target

c9e9b3425ab8413dbeede87bc6b400bc5de84bd70333c1f9f10b737e5f4b3eb9
Size

621KB
MD5

7ba4a347337f5cb8022a1f51d6a78e00
SHA1

ae700efae9f43434369f39fb9961b99a50dcde89
SHA256

c9e9b3425ab8413dbeede87bc6b400bc5de84bd70333c1f9f10b737e5f4b3eb9
SHA512

beeb1b479bd2d048d93a0277da7866c3a9a7f2ea468518741f7703b066289ce19fa1b01bb034db785b66b24ddd770c00cbaec1880e9a2f5f148a779f182c6462
SSDEEP

12288:gWzUZUDpW76mfil46CrS8gXCWpNSkpBMVrgEG1+jvC9dy:PZDplmfIkO7Xx2kpBMVsRd

Score

N/A

Malware Config

Signatures

Files

c9e9b3425ab8413dbeede87bc6b400bc5de84bd70333c1f9f10b737e5f4b3eb9
.exe windows x86

7f13f1946f441f08aabf44bedbc22f15

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CheckTokenMembership
AllocateAndInitializeSid
FreeSid

kernel32

CloseHandle
WriteFile
SetFilePointer
CreateFileW
WriteConsoleW
GetFileType
GetStdHandle
LocalFree
LocalAlloc
FormatMessageW
GetLastError
GetCurrentDirectoryW
FreeLibrary
SetConsoleCtrlHandler
GetFileAttributesW
GetModuleHandleW
GetConsoleOutputCP
HeapSetInformation
SetThreadUILanguage
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

msvcrt

_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
sprintf_s
_amsg_exit
_initterm
exit
_XcptFilter
_wcsicmp
_exit
_cexit
__wgetmainargs
setlocale
wcsncpy_s
wcscat_s
wcscpy_s
wcsrchr
iswctype
fgetwc
towlower
vswprintf_s
__iob_func
vfwprintf
vprintf
__setusermatherr

scecli

SceFreeProfileMemory
SceAnalyzeSystem
SceIsSystemDatabase
SceGenerateRollback
SceRegisterRegValues
SceOpenProfile
SceGetSecurityProfileInfo
SceFreeMemory
SceCloseProfile
SceWriteSecurityProfileInfo
SceSetupGenerateTemplate
SceBrowseDatabaseTable
SceConfigureSystem

user32

LoadStringW

shlwapi

PathIsRootW
PathCanonicalizeW
PathIsDirectoryW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 588KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7f13f1946f441f08aabf44bedbc22f15

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

scecli

user32

shlwapi

Sections

.text Size: 14KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 908B

.rsrc Size: 17KB - Virtual size: 17KB

.reloc Size: 588KB - Virtual size: 1.8MB

.text
Size: 14KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 908B

.rsrc
Size: 17KB - Virtual size: 17KB

.reloc
Size: 588KB - Virtual size: 1.8MB