b8928b788baddc1abfee8e90e8cb1208c3ac6e5f5160eb84794ffbb9378a18e8

General

Target

b8928b788baddc1abfee8e90e8cb1208c3ac6e5f5160eb84794ffbb9378a18e8
Size

209KB
MD5

a2a4eb1c5f99e4b0b1563c3dfaf12310
SHA1

bf5bf216423f225b596e2eb24d003dc2fad1affd
SHA256

b8928b788baddc1abfee8e90e8cb1208c3ac6e5f5160eb84794ffbb9378a18e8
SHA512

0c74bbc9d7f793eef1c0fa852a5e30d94cb9018b34204bd6f0b1025456b0c1d8cdcfe014e613ab422d4dfd96959f7683d57b16540ef1a6e4cb19d263db6492e4
SSDEEP

6144:6Ql2/M3ewHOOOyeDWrbaJN9+j8JG+oI45rAsNr:6QwM3fbFeir4Kj8JR749H

Score

N/A

Malware Config

Signatures

Files

b8928b788baddc1abfee8e90e8cb1208c3ac6e5f5160eb84794ffbb9378a18e8
.exe windows x86

8c1efaa2eed16578dbd7c2ef6d1fa4f7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

schannel

QuerySecurityPackageInfoA
QueryContextAttributesW
QuerySecurityPackageInfoW
QueryContextAttributesA
InitializeSecurityContextW

kernel32

GetLocaleInfoA
FindResourceA
CreateFileA
lstrlenA
GetProcessHeap
GetCurrentProcessId
SetLastError
HeapAlloc
GetCurrentProcess
MultiByteToWideChar
QueryPerformanceCounter
GetOEMCP
HeapFree
CloseHandle
GetTickCount
LoadLibraryW
GetSystemTimeAsFileTime
SystemTimeToFileTime
WideCharToMultiByte
lstrcmpA
SetUnhandledExceptionFilter
GetLocalTime
lstrcpyA

scecli

SceAddToObjectList
SceAnalyzeSystem
SceAddToNameStatusList
SceCloseProfile
SceAppendSecurityProfileInfo
SceBrowseDatabaseTable

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegQueryValueExA

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.odata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jdata
Size: 3KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c1efaa2eed16578dbd7c2ef6d1fa4f7

Headers

File Characteristics

Imports

schannel

kernel32

scecli

advapi32

Sections

.text Size: 109KB - Virtual size: 109KB

.rdata Size: 90KB - Virtual size: 90KB

.odata Size: 512B - Virtual size: 512B

.jdata Size: 3KB - Virtual size: 1.5MB

.tls Size: 512B - Virtual size: 512B

.rcrc Size: 3KB - Virtual size: 3KB

.text
Size: 109KB - Virtual size: 109KB

.rdata
Size: 90KB - Virtual size: 90KB

.odata
Size: 512B - Virtual size: 512B

.jdata
Size: 3KB - Virtual size: 1.5MB

.tls
Size: 512B - Virtual size: 512B

.rcrc
Size: 3KB - Virtual size: 3KB