d558f6fe6d5d16927bb3d4a6005cc50c6e6ec71fad15b0a156affb2ec462ab5d

General

Target

d558f6fe6d5d16927bb3d4a6005cc50c6e6ec71fad15b0a156affb2ec462ab5d
Size

802KB
MD5

a356ca6bf53c9f47e4af3d2943e8c490
SHA1

cf3d3f47ed9cea7a9948f6fcc1c537e6be9bc2c1
SHA256

d558f6fe6d5d16927bb3d4a6005cc50c6e6ec71fad15b0a156affb2ec462ab5d
SHA512

26469f2872803d740d6502df2be05711f9a752342492301ac9cbcf4ea6075b1304b763c5d8ba20e1c6fbf5b6643451c06ebde7416426b417fd7752747fff23d1
SSDEEP

24576:XmnE/J0GIlfJNmqc3jnFHbtdwFU0lpg0Qb4lfNxyKO:RJ0GxFhX+lpFQsZNQK

Score

N/A

Malware Config

Signatures

Files

d558f6fe6d5d16927bb3d4a6005cc50c6e6ec71fad15b0a156affb2ec462ab5d
.exe windows x86

b7862833d237654e8c361555cf9aa187

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrlenA
DeleteFileA
CreateEventW
GetStartupInfoA
ResumeThread
CreateEventW
GetPrivateProfileSectionA
GetProcessHeap
TlsGetValue
HeapFree
GetDriveTypeA
GetVolumePathNameA
VirtualProtect
SuspendThread
GetStringTypeW
CreateEventW
FindAtomW
SetLastError
GetProcessVersion
LoadLibraryW
GetCurrentThread

clbcatq

CheckMemoryGates
ComPlusMigrate
SetupOpen
ComPlusMigrate
DllGetClassObject
CheckMemoryGates
SetupOpen
DllGetClassObject
CheckMemoryGates
CheckMemoryGates
SetupOpen
ComPlusMigrate
CheckMemoryGates

gpedit

BrowseForGPO
ExportRSoPData
DllGetClassObject
DllCanUnloadNow

Sections

.text
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 1.4MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 795KB - Virtual size: 795KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.import
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7862833d237654e8c361555cf9aa187

Headers

File Characteristics

Imports

kernel32

clbcatq

gpedit

Sections

.text Size: 1024B - Virtual size: 616B

.data Size: 3KB - Virtual size: 11KB

.rdata Size: 512B - Virtual size: 1.4MB

.rsrc Size: 795KB - Virtual size: 795KB

.orpc Size: 512B - Virtual size: 4KB

.import Size: 512B - Virtual size: 4KB

.text
Size: 1024B - Virtual size: 616B

.data
Size: 3KB - Virtual size: 11KB

.rdata
Size: 512B - Virtual size: 1.4MB

.rsrc
Size: 795KB - Virtual size: 795KB

.orpc
Size: 512B - Virtual size: 4KB

.import
Size: 512B - Virtual size: 4KB