0b6c10221812334fd8caaec0841dc28baffd5cf576d335833b8f69d56632734c

Sharing

Copy URL Twitter E-mail

General

Target

0b6c10221812334fd8caaec0841dc28baffd5cf576d335833b8f69d56632734c
Size

104KB
MD5

a322dc81e8578845fb7394cb929af13f
SHA1

674a94079b33dfa2793996107f2bc6926e770641
SHA256

0b6c10221812334fd8caaec0841dc28baffd5cf576d335833b8f69d56632734c
SHA512

19a1b9a2d3ef512cc54b85e400d8d8585dc29c95ba9a315385ded4d948059a7e6da991fc1f52a93a1bc42c1d8cf5d101779fa35491614ea175f3a9cc6174132c
SSDEEP

3072:HTjB9HaT7e6pblNEIn9b2QG6f+U5KXE0ZmRRrOZ:B9GKqECRK6mNZaIZ

Score

N/A

Malware Config

Signatures

Files

0b6c10221812334fd8caaec0841dc28baffd5cf576d335833b8f69d56632734c
.exe windows x86

3b62b9317a478305b38ba88882610d86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
lstrlenA
GetACP
GetModuleFileNameW
lstrcatW
SizeofResource
lstrlenW
InterlockedDecrement
LoadLibraryExW
InitializeCriticalSection
LeaveCriticalSection
DisableThreadLibraryCalls
FreeLibrary
LoadResource
HeapDestroy
InterlockedIncrement
DeleteCriticalSection
lstrcpyW
lstrcpynW
GetLastError
GetStartupInfoA
FindResourceW

msvcrt

wcsncpy
realloc
_adjust_fdiv
wcslen
wcscpy
_initterm
_except_handler3
wcsncat
malloc
free
_purecall
__CxxFrameHandler

rpcrt4

RpcStringFreeW

advapi32

RegQueryInfoKeyW
RegCloseKey
RegEnumKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW

ntdll

RtlAdjustPrivilege
NtAllocateVirtualMemory
RtlAddAccessAllowedAceEx

ole32

CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc

oleaut32

VariantClear

user32

CharNextW

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3b62b9317a478305b38ba88882610d86

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

rpcrt4

advapi32

ntdll

ole32

oleaut32

user32

Sections

.text Size: 9KB - Virtual size: 8KB

.rsrc Size: 12KB - Virtual size: 11KB

.data Size: 3KB - Virtual size: 1.4MB

.rdata Size: 298KB - Virtual size: 298KB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 12KB - Virtual size: 11KB

.data
Size: 3KB - Virtual size: 1.4MB

.rdata
Size: 298KB - Virtual size: 298KB

.tls
Size: 512B - Virtual size: 4KB