22bb717b2a880b1b0d88a749fef2880188e060bda2ea82260e5af4f499863d9c

General

Target

22bb717b2a880b1b0d88a749fef2880188e060bda2ea82260e5af4f499863d9c
Size

121KB
MD5

9169142f826f0fcd5170fff5e5bc8650
SHA1

35ff311c7429bbd20ccb15908f11bbbea2f81e4e
SHA256

22bb717b2a880b1b0d88a749fef2880188e060bda2ea82260e5af4f499863d9c
SHA512

855d1eceb1d50acfa3d55692650c3425e3ec6ff2662189030e3c66a06377830576f3fcfdf4cae2df74f497bb090171852da37182ef7a6ff8d89d5099864138bf
SSDEEP

3072:o8kiQfyNeOf6xWxC/MNX+mwDVvFAp7qVQJ:o7tyNb6xW8k1+phmJ

Score

N/A

Malware Config

Signatures

Files

22bb717b2a880b1b0d88a749fef2880188e060bda2ea82260e5af4f499863d9c
.exe windows x86

ceda8c39b2aa4f75195b8d27f7b936bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
CryptReleaseContext
RegEnumKeyExA
DuplicateTokenEx
CryptGetHashParam
CryptAcquireContextW
GetUserNameW
CryptCreateHash
CryptDestroyHash

kernel32

SetFileTime
VirtualProtect
SetFilePointer
lstrcpyA
ExpandEnvironmentStringsW
GetFileSizeEx
GetModuleHandleA
GetEnvironmentVariableW
GetModuleFileNameW
VirtualAlloc
lstrcpynW
CreateProcessW
WaitForSingleObject
GetSystemTime
GetVersionExW
CreateFileA
CreateMutexW
GetModuleFileNameA
ResetEvent
HeapReAlloc

user32

EndDialog
GetClassNameA
GetForegroundWindow
MsgWaitForMultipleObjects
GetDlgItem
GetIconInfo
GetKeyState
GetWindowTextA
SetProcessWindowStation
DrawIcon
SetThreadDesktop
SendMessageA
ToUnicode
GetCursorPos
GetClipboardData
GetKeyboardState

shlwapi

PathCombineW
PathFileExistsW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIW
StrCmpNIA
wvnsprintfA
PathFindFileNameW
StrStrW
wnsprintfW

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ceda8c39b2aa4f75195b8d27f7b936bf

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

shlwapi

Sections

.text Size: 58KB - Virtual size: 58KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 60KB - Virtual size: 60KB

.text
Size: 58KB - Virtual size: 58KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 60KB - Virtual size: 60KB