b14942ba8da09a1cbea8e75348da06aaedf9a0b387662322c4518b50d294bf48

General

Target

b14942ba8da09a1cbea8e75348da06aaedf9a0b387662322c4518b50d294bf48
Size

210KB
MD5

0c4a18df27aedce76aca1f082293dfc0
SHA1

9b69b1521831b6553f94ab0117bc9711b90524f4
SHA256

b14942ba8da09a1cbea8e75348da06aaedf9a0b387662322c4518b50d294bf48
SHA512

85c9930b6e7d5403470f2e5afffd51abfab9f0cd1a04bc5c39c2877fa5a2f4983afb21c3f47795dc1d2d76f6ceb85ca1ecab4c4c1132bb0438e3eb2fcee87b22
SSDEEP

3072:BwprxnBWmNygndCyb9XtEjdt9gUUsrBUNCLdg56T0IOiW/iexjEXKHlbJ1:BwHHndCy9St97FrBUNA0Yexo6HlP

Score

N/A

Malware Config

Signatures

Files

b14942ba8da09a1cbea8e75348da06aaedf9a0b387662322c4518b50d294bf48
.exe windows x86

ae9d54d8a666bca2c783aa91d6aa89cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

schannel

QueryContextAttributesA
QueryContextAttributesW
QuerySecurityPackageInfoW
QuerySecurityPackageInfoA
InitializeSecurityContextW

scecli

SceAnalyzeSystem
SceCloseProfile
SceBrowseDatabaseTable
SceAddToObjectList
SceAppendSecurityProfileInfo
SceAddToNameStatusList

kernel32

LoadLibraryW
CreateFileA
HeapAlloc
CloseHandle
GetTickCount
MultiByteToWideChar
GetVolumeInformationA
GetOEMCP
SetLastError
GetSystemTimeAsFileTime
GetProcessHeap
GetLocalTime
lstrlenA
WideCharToMultiByte
SystemTimeToFileTime
GetCurrentProcessId
HeapFree
lstrcmpA
GetCurrentProcess
GetLocaleInfoA
FindResourceA
SetUnhandledExceptionFilter
lstrcpyA
QueryPerformanceCounter
IsValidLocale

advapi32

RegOpenKeyExW
RegQueryValueExA
RegCloseKey
RegQueryValueExW

Sections

.text
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.odata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jdata
Size: 3KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae9d54d8a666bca2c783aa91d6aa89cc

Headers

File Characteristics

Imports

schannel

scecli

kernel32

advapi32

Sections

.text Size: 110KB - Virtual size: 109KB

.rdata Size: 90KB - Virtual size: 90KB

.odata Size: 512B - Virtual size: 512B

.jdata Size: 3KB - Virtual size: 1.5MB

.tls Size: 512B - Virtual size: 512B

.rcrc Size: 3KB - Virtual size: 3KB

.text
Size: 110KB - Virtual size: 109KB

.rdata
Size: 90KB - Virtual size: 90KB

.odata
Size: 512B - Virtual size: 512B

.jdata
Size: 3KB - Virtual size: 1.5MB

.tls
Size: 512B - Virtual size: 512B

.rcrc
Size: 3KB - Virtual size: 3KB