2478e937870ce3a0494a4bab70ec40bfd533e801f30d7d732931d5a98afd3497

General

Target

2478e937870ce3a0494a4bab70ec40bfd533e801f30d7d732931d5a98afd3497
Size

58KB
MD5

82cfc01e23e4c9327feb35e76221c630
SHA1

14ce8e4c7d80e4c299d0f7e3f39f8e14092d7bbf
SHA256

2478e937870ce3a0494a4bab70ec40bfd533e801f30d7d732931d5a98afd3497
SHA512

f1e77db028d73620d1e513f6e32d792510e4a426fce2be77ae7b4729a0b66181a07008703ea2866818fef12db395523266043013a4d4f66f19a66006cd14aeb3
SSDEEP

768:33j6Od7ZGct53ORihaSzTPgIyUmIP0VOT/EAgz69NFkLcDpIe/LreT30X4fPu:3OOd7Zd33OwPg5u0UEAPHkiIePP4f2

Score

N/A

Malware Config

Signatures

Files

2478e937870ce3a0494a4bab70ec40bfd533e801f30d7d732931d5a98afd3497
.exe windows x86

b0aa8755e3f30054f270b2b04ac4de2a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

kernel32

GetVersionExW
GetFileType
LocalFree
WriteFile
WideCharToMultiByte
LocalAlloc
WriteConsoleW
GetStdHandle
GetLastError
GetModuleHandleW
SetThreadPreferredUILanguages
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange

msvcrt

_except_handler4_common
_controlfp
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_wcsicmp
_adjust_fdiv

user32

LoadStringW

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

eaiavjp
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b0aa8755e3f30054f270b2b04ac4de2a

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

Sections

.text Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 892B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 28KB - Virtual size: 29KB

eaiavjp Size: - Virtual size: 4KB

.ndata Size: 20KB - Virtual size: 20KB

.text
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 892B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 28KB - Virtual size: 29KB

eaiavjp
Size: - Virtual size: 4KB

.ndata
Size: 20KB - Virtual size: 20KB