a0a08501e1694ad80d591edd3bf4aa2f6b06b920210fd5043418daee07d051a1

Sharing

Copy URL Twitter E-mail

General

Target

a0a08501e1694ad80d591edd3bf4aa2f6b06b920210fd5043418daee07d051a1
Size

203KB
MD5

8222c877b2e2da3e8e302c6409762fb6
SHA1

9df049b9c613002f06278e483ef82a8d0faee83e
SHA256

a0a08501e1694ad80d591edd3bf4aa2f6b06b920210fd5043418daee07d051a1
SHA512

396c169a5804550ac6f083a49251a3cf98a0d2b8fbe3ae8a7f87e1a376d1c10f1602a51f0a4d4e2b72a0b06ff00ca317a9cc69c8b696a0f0988380cfb00b7aa6
SSDEEP

6144:8WMRh1uLZLcydPlJReSr45J5G1YSo9xW9Q:8hL1uLZrjJf+M

Score

N/A

Malware Config

Signatures

Files

a0a08501e1694ad80d591edd3bf4aa2f6b06b920210fd5043418daee07d051a1
.exe windows x86

9b0bbd6a5fab4842f77d636cdf0bf964

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegEnumValueW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
GetTokenInformation
OpenProcessToken
RegGetValueW

kernel32

LocalFree
FormatMessageW
SetFilePointer
ReadFile
CloseHandle
CreateFileW
LocaleNameToLCID
DeleteFileW
WriteFile
SetFileAttributesW
ExpandEnvironmentStringsW
GetCurrentProcess
MultiByteToWideChar
ReadConsoleW
GetStdHandle
WriteConsoleW
GetLastError
WideCharToMultiByte
GetFileType
GetConsoleMode
GetVersionExW
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
CompareStringW
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
SetThreadPreferredUILanguages
LCIDToLocaleName

msvcrt

free
malloc
_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_amsg_exit
_initterm
_XcptFilter
_exit
_cexit
__wgetmainargs
_wchdir
_wremove
strncmp
exit
memset
_wcsicmp
_vsnwprintf
__setusermatherr
_wcsnicmp

ole32

StringFromGUID2
CoCreateGuid

shell32

SHCreateDirectoryExW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zfcsjqy
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9b0bbd6a5fab4842f77d636cdf0bf964

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

ole32

shell32

Sections

.text Size: 14KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 159KB - Virtual size: 158KB

.reloc Size: 28KB - Virtual size: 29KB

zfcsjqy Size: - Virtual size: 4KB

.text
Size: 14KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 159KB - Virtual size: 158KB

.reloc
Size: 28KB - Virtual size: 29KB

zfcsjqy
Size: - Virtual size: 4KB