039403606918c45bfb1e050ad6489dd539af4dc9640cf083af81988efe61d1e1

Sharing

Copy URL Twitter E-mail

General

Target

039403606918c45bfb1e050ad6489dd539af4dc9640cf083af81988efe61d1e1
Size

52KB
MD5

013311dffd23e379f5f033fa3f6be451
SHA1

1e8a99b88bdf71be341c8e4b54d828a2c13835d1
SHA256

039403606918c45bfb1e050ad6489dd539af4dc9640cf083af81988efe61d1e1
SHA512

8ca27f9f126c6b59ec2f77892b8fb7fe4d76574f124415f68563dff1858834920a0ffecba98f60dd90389315d3da9f697f135c24dea4dcbeae3a0d57d224a2bd
SSDEEP

768:4p6VnTyUku/+ShFwbT0Siky3kI7vvaBnQZ9i4AquQQLXztJteo3lmg:Tlt/9FwbTXixfE6983lm

Score

N/A

Malware Config

Signatures

Files

039403606918c45bfb1e050ad6489dd539af4dc9640cf083af81988efe61d1e1
.exe windows x86

a93dd46d48805b0febbbc6d99ea01e9f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

EnumProcessModules
GetModuleBaseNameA

kernel32

DuplicateHandle
Sleep
CreateThread
InterlockedDecrement
GetCurrentThread
GetLastError
VirtualProtectEx
WriteProcessMemory
OpenProcess
CloseHandle
GetLocaleInfoA
VirtualProtect
GetCurrentProcess
GetCurrentProcessId
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
LocalFree
ExitProcess
RtlUnwind
GetModuleHandleA
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
RaiseException
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
SetFilePointer
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
TerminateProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InterlockedExchange
VirtualQuery
HeapSize
SetUnhandledExceptionFilter
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
FlushFileBuffers
GetSystemInfo

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
SetThreadToken
DuplicateTokenEx
CreateProcessAsUserA
OpenThreadToken
LookupAccountSidA
GetTokenInformation
RegDeleteKeyA

ole32

CoCreateInstance
CoInitialize

oleaut32

SysFreeString
SysAllocString
VariantClear

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jgd
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a93dd46d48805b0febbbc6d99ea01e9f

Headers

File Characteristics

Imports

psapi

kernel32

advapi32

ole32

oleaut32

Sections

.text Size: 36KB - Virtual size: 33KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 8KB

.jgd Size: - Virtual size: 1B

.text
Size: 36KB - Virtual size: 33KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 8KB

.jgd
Size: - Virtual size: 1B