3880e36f89f2d73a3baf7171cccaaaf1948b77d1653188e9a3c0eba9bb80a5b6

Sharing

Copy URL Twitter E-mail

General

Target

3880e36f89f2d73a3baf7171cccaaaf1948b77d1653188e9a3c0eba9bb80a5b6
Size

61KB
MD5

719edeec0d73c52e7d3ce1c0bcc61ff0
SHA1

8aa2e0acf7d809de07a580f07f4cdbdf2ec1ef2b
SHA256

3880e36f89f2d73a3baf7171cccaaaf1948b77d1653188e9a3c0eba9bb80a5b6
SHA512

82fbd74688cdb01b60be237b075ca7701b0d57bd9f0fdc976cf1a5a7f8c674bd8ffdbad5daaa6e3417c1c4702d728ee0f3fbb02875c5071426447cc5c346fb75
SSDEEP

1536:A/nZQmaO2vZP81J/3o4pv6GjrQHKvQRNSWuInMOHCxxXNGdqd+:A/nePO2vd81JwicqvQjsOHoXNeqc

Score

N/A

Malware Config

Signatures

Files

3880e36f89f2d73a3baf7171cccaaaf1948b77d1653188e9a3c0eba9bb80a5b6
.exe windows x86

77d6f1b20ed5d89888e236162c56c814

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
??2@YAPAXI@Z
??3@YAXPAX@Z
__getmainargs
wcstok
_wtol

advapi32

RegOpenKeyExW
RegCloseKey
AllocateAndInitializeSid
ImpersonateSelf
FreeSid
RegQueryValueExW

kernel32

GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
UnhandledExceptionFilter
GetCommandLineW
InterlockedDecrement
GetModuleHandleW
FormatMessageW
GetLastError
LocalFree
ExpandEnvironmentStringsW
CreateProcessW
SetUnhandledExceptionFilter
GetModuleHandleA
GetStartupInfoA
QueryPerformanceCounter
CloseHandle
InterlockedIncrement

user32

DestroyIcon
LoadIconW

ole32

CoUninitialize
CoInitialize
CoCreateInstance

shlwapi

ord219

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.HFJAG
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.LAKSI
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.HAGSJ
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.81777
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.JA132
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.5a46
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.7381
Size: 512B - Virtual size: 158B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

77d6f1b20ed5d89888e236162c56c814

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

user32

ole32

shlwapi

Sections

.text Size: 17KB - Virtual size: 16KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 2KB

.HFJAG Size: 103KB - Virtual size: 103KB

.LAKSI Size: 512B - Virtual size: 168B

.HAGSJ Size: 103KB - Virtual size: 103KB

.81777 Size: 512B - Virtual size: 134B

.JA132 Size: 103KB - Virtual size: 103KB

.5a46 Size: 103KB - Virtual size: 103KB

.7381 Size: 512B - Virtual size: 158B

.rsrc Size: 17KB - Virtual size: 16KB

.reloc Size: 512B - Virtual size: 192B

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 2KB

.HFJAG
Size: 103KB - Virtual size: 103KB

.LAKSI
Size: 512B - Virtual size: 168B

.HAGSJ
Size: 103KB - Virtual size: 103KB

.81777
Size: 512B - Virtual size: 134B

.JA132
Size: 103KB - Virtual size: 103KB

.5a46
Size: 103KB - Virtual size: 103KB

.7381
Size: 512B - Virtual size: 158B

.rsrc
Size: 17KB - Virtual size: 16KB

.reloc
Size: 512B - Virtual size: 192B