b922e7fb0899bc541f9d9e079c07bc91bddcc3ec7cff91379984015158f5c8fe

Sharing

Copy URL Twitter E-mail

General

Target

b922e7fb0899bc541f9d9e079c07bc91bddcc3ec7cff91379984015158f5c8fe
Size

179KB
MD5

00583f81e6ed046b867770898cb085f0
SHA1

174b5c77f07a532d3a3b6faebcae47623278405b
SHA256

b922e7fb0899bc541f9d9e079c07bc91bddcc3ec7cff91379984015158f5c8fe
SHA512

691bf3e14184825ff54dd248b45dfc314f9aa1f642ddd63c4e37d385fe06a501010be461d6def6ebe8fca41c4cbeca5a04d9eff3c824b89f94299b5834b65869
SSDEEP

3072:oJjQ1Us58usGSio5Da71OytTdU2Apnb1PuO1XfvadgIfveM:OjyUsqu+Z0OXNnbkOxfvY

Score

N/A

Malware Config

Signatures

Files

b922e7fb0899bc541f9d9e079c07bc91bddcc3ec7cff91379984015158f5c8fe
.exe windows x86

298b9505fa37e701cf0f3aff1497409f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GetCommandLineW
LoadLibraryW
GetProcAddress
FreeLibrary
GetProcessHeap
HeapAlloc
HeapFree
CreateFileW
CloseHandle
ReadFile
GetModuleFileNameW
FlushFileBuffers
WriteConsoleW
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
LeaveCriticalSection
EnterCriticalSection
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
HeapSize
HeapReAlloc
LCMapStringW
GetStringTypeW
SetStdHandle

shell32

CommandLineToArgvW
ShellExecuteW

advapi32

RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyExW
RegEnumValueW
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW

shlwapi

SHDeleteKeyW

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 81KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

298b9505fa37e701cf0f3aff1497409f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

advapi32

shlwapi

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 33KB - Virtual size: 32KB

.reloc Size: 81KB - Virtual size: 84KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 33KB - Virtual size: 32KB

.reloc
Size: 81KB - Virtual size: 84KB