896b95c4aa4964635281124f78c5aa7b9da4095d307ddb4eef3ec6120ff9cd33

General

Target

896b95c4aa4964635281124f78c5aa7b9da4095d307ddb4eef3ec6120ff9cd33
Size

296KB
MD5

0b1683c7a8aad353f1e942945c5b4660
SHA1

094a49b11b10c1fdc53a4e8f83a85ed2363c32fe
SHA256

896b95c4aa4964635281124f78c5aa7b9da4095d307ddb4eef3ec6120ff9cd33
SHA512

6874f3025c35249e276c365547a3fa2927c7d3a3681f5bee29a17bbbd95302089f43dcb81db91af3b35875f62c0a3cb7021e5ebeb3885723cd2077f04b19d969
SSDEEP

6144:yVoOJrfB3+pbLPQbOqLVJ5bbZXegqw48gyH0YtnbvK/kFZj:yVoOJrp32M6WJtbZU8JFtrymB

Score

N/A

Malware Config

Signatures

Files

896b95c4aa4964635281124f78c5aa7b9da4095d307ddb4eef3ec6120ff9cd33
.exe windows x86

1e134df78c720419c72f4b0e04fd4ee5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegCloseKey

msvcrt

fwrite
fopen
strspn
strcspn
fclose
fread
strrchr
fflush
_putenv
memmove
strpbrk
fgets
strchr
perror
malloc
_exit
sprintf
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
free
strncmp
getenv
printf
exit
_iob
fprintf
__mb_cur_max
calloc
_pctype
_isctype
_XcptFilter
_strdup
_stat
_strnicmp
_stricmp
_close
_open
_read
_lseek

kernel32

GetCommandLineA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
CreateProcessA
GetProcAddress

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�A
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1e134df78c720419c72f4b0e04fd4ee5

Headers

File Characteristics

Imports

advapi32

msvcrt

kernel32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 16KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 992B

�A Size: 240KB - Virtual size: 240KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 16KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 992B

�A
Size: 240KB - Virtual size: 240KB