6092476635480c7716d7da234e70d55f6171505999c99c0ed4222aa1fcb28853

Sharing

Copy URL Twitter E-mail

General

Target

6092476635480c7716d7da234e70d55f6171505999c99c0ed4222aa1fcb28853
Size

143KB
MD5

837c21d9d79cb95b942ce1bb5b6a2680
SHA1

a66b709db75adffc37e48359caa706025827aa00
SHA256

6092476635480c7716d7da234e70d55f6171505999c99c0ed4222aa1fcb28853
SHA512

fd7f1897fd2936cb03372b548b58ac475c63345de9ea53f102057ac59feb9e4ced6cba3fea0e1133d930882f5eca79f1b96ba56d666562b18d20660ef36b44e4
SSDEEP

3072:gzFl21taU7BovJs1v1wiHMg2uLpL7EhyejyAZBmXoxN:g5l21IgBlvwAJlpIDyAZ5

Score

N/A

Malware Config

Signatures

Files

6092476635480c7716d7da234e70d55f6171505999c99c0ed4222aa1fcb28853
.exe windows x86

1440cd45cc6d74c7610611158b059063

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellAboutW
ExtractIconW
DragFinish
DragQueryFileW
ExtractAssociatedIconA
ShellExecuteW
DragQueryFileA
DoEnvironmentSubstA

ole32

CoIsOle1Class
CoRegisterPSClsid
OleCreate
CoCopyProxy
OleCreateLinkFromData
OleRegEnumVerbs
OleSetAutoConvert

advapi32

AddAce
LookupPrivilegeNameA
ControlService
DeregisterEventSource
ImpersonateLoggedOnUser
SetSecurityDescriptorControl
RegEnumKeyW
AccessCheckAndAuditAlarmA

kernel32

SetFilePointer
FlushFileBuffers
GetConsoleMode
CloseHandle
GetStringTypeW
MultiByteToWideChar
LCMapStringW
IsProcessorFeaturePresent
WriteConsoleW
SetStdHandle
CreateFileW
GetConsoleCP
DeleteCriticalSection
CreateRemoteThread
GetAtomNameW
GetCommandLineA
WaitCommEvent
LocalLock
CancelDeviceWakeupRequest
HeapQueryInformation
GetLastError
HeapReAlloc
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
HeapFree
HeapAlloc
HeapSetInformation
GetStartupInfoW
HeapCreate
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1440cd45cc6d74c7610611158b059063

Headers

DLL Characteristics

File Characteristics

Imports

shell32

ole32

advapi32

kernel32

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 3KB - Virtual size: 69KB

.rsrc Size: 97KB - Virtual size: 168KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 3KB - Virtual size: 69KB

.rsrc
Size: 97KB - Virtual size: 168KB