6b61551ae9307b2ce05b2100ecf1c025865250f1b2d2b5a983b210dd9c0d43b1

General

Target

6b61551ae9307b2ce05b2100ecf1c025865250f1b2d2b5a983b210dd9c0d43b1
Size

9KB
MD5

0c303ccc4d87225f1e1a75dc31feaa7c
SHA1

2b6efa459808f7682637c46d9581d44d372b0e30
SHA256

6b61551ae9307b2ce05b2100ecf1c025865250f1b2d2b5a983b210dd9c0d43b1
SHA512

55c5d644d9777965e8830c7e3ad62d53fe12881d992bab31d5f6d9b57d8e330ad1abdd47d25a0e1c5fc1228fc3b7c8ec7f62dd8718bbfb6365b9fa6f69c54737
SSDEEP

192:ixJMD66kiiaNvIzGIeh+ziv4eK/tRJa6rwBSKLs:4MgibIaIRzTb/fk6zN

Score

N/A

Malware Config

Signatures

Files

6b61551ae9307b2ce05b2100ecf1c025865250f1b2d2b5a983b210dd9c0d43b1
.exe windows x86

d942886c6f1d7fa74cebd127be481e28

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentProcessId
CloseHandle
ResumeThread
SetThreadContext
WriteProcessMemory
GetThreadContext
GetCurrentProcess
GetOverlappedResult
WaitForSingleObject
GetLastError
WriteFile
ReadFile
CreateFileA
CreateEventA
GetEnvironmentVariableA
GetFileSize
SetFileAttributesA
GetSystemDirectoryA
ExitProcess
CreateProcessA
GetCommandLineA
VirtualAllocEx
VirtualProtectEx
VirtualFreeEx
ReadProcessMemory
HeapFree
GetProcessHeap
VirtualFree
VirtualAlloc
HeapAlloc
SystemTimeToFileTime
GetSystemTime
DeviceIoControl
CreateFileW
HeapReAlloc
Sleep

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

ntdll

NtQuerySystemInformation
ZwSystemDebugControl

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rebld_i
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d942886c6f1d7fa74cebd127be481e28

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

ntdll

Sections

.text Size: 5KB - Virtual size: 8KB

.rdata Size: 1KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.rebld_i Size: 1KB - Virtual size: 1KB

.text
Size: 5KB - Virtual size: 8KB

.rdata
Size: 1KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB

.rebld_i
Size: 1KB - Virtual size: 1KB