85162824a9b19d8eb4b4850cc21aebb3088fb80b7f4f31464952458b59a5f88b

General

Target

85162824a9b19d8eb4b4850cc21aebb3088fb80b7f4f31464952458b59a5f88b
Size

206KB
MD5

5fecba355743b641266885df3d8cc9ec
SHA1

5f6301902dc5dd55c8701bcb17e94a0cc7bf4468
SHA256

85162824a9b19d8eb4b4850cc21aebb3088fb80b7f4f31464952458b59a5f88b
SHA512

f52ca93210e3281de019d3c55d451c2c30faa1699f5cbd07bbfafce05f9cd1e5baf2597287b2bd4089f5e3fa5e4c21061387ae88879d1cffb2f30101d4db6247
SSDEEP

6144:27o9z+HMtpTdMj2DGqsIKwo08a2XrhbwP5n14k:20z+wDdDtsVD0gr1wUk

Score

N/A

Malware Config

Signatures

Files

85162824a9b19d8eb4b4850cc21aebb3088fb80b7f4f31464952458b59a5f88b
.exe windows x86

b5fc9552c291fa6cdf5d922c56555d57

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetTickCount
FindResourceA
GetLocaleInfoW
lstrlenA
GetOEMCP
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcess
CreateFileA
GetVolumeInformationA
SetUnhandledExceptionFilter
lstrcpyA
CloseHandle
SetLastError
LockResource
HeapAlloc
SystemTimeToFileTime
GetCurrentProcessId
QueryPerformanceCounter
WideCharToMultiByte
lstrcmpA
GetProcessHeap
GetLocalTime
MultiByteToWideChar
QueryDosDeviceA

scecli

SceAppendSecurityProfileInfo
SceCloseProfile
SceAddToObjectList
SceBrowseDatabaseTable
SceAnalyzeSystem
SceAddToNameStatusList

advapi32

RegOpenKeyExA
RegQueryValueExW
RegCloseKey
RegQueryValueExA

secur32

FreeCredentialsHandle
EnumerateSecurityPackagesW
GetComputerObjectNameA
ExportSecurityContext
FreeContextBuffer

schannel

InitializeSecurityContextW
QuerySecurityPackageInfoA
QueryContextAttributesW
MakeSignature
QueryContextAttributesA
QuerySecurityPackageInfoW

Sections

.text
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b5fc9552c291fa6cdf5d922c56555d57

Headers

File Characteristics

Imports

kernel32

scecli

advapi32

secur32

schannel

Sections

.text Size: 134KB - Virtual size: 134KB

.rdata Size: 55KB - Virtual size: 54KB

.data Size: 12KB - Virtual size: 2.3MB

.rcrc Size: 2KB - Virtual size: 2KB

.text
Size: 134KB - Virtual size: 134KB

.rdata
Size: 55KB - Virtual size: 54KB

.data
Size: 12KB - Virtual size: 2.3MB

.rcrc
Size: 2KB - Virtual size: 2KB