5b6b8d18fbb8c5586020b23504782e6170eba5fd1d53e4460f73f578c155b1eb

General

Target

5b6b8d18fbb8c5586020b23504782e6170eba5fd1d53e4460f73f578c155b1eb
Size

178KB
MD5

0dea14b20d2e660f7639d673987c9601
SHA1

30481a52c5e94c928a2356086603fb64115e4480
SHA256

5b6b8d18fbb8c5586020b23504782e6170eba5fd1d53e4460f73f578c155b1eb
SHA512

0b4582fb262a645f0eac3f6f7573beb27422bb666ab0914f7be37c98de56196cfcadfa6b42f9a38b05a837bb9cb701b7a555e3f3254895d3563034d860851ba8
SSDEEP

3072:aFBy5+i50svhASoINqsSTdas9PUDcELTJ28eh7B2LYQIYD/1XoiteHZcB5GKUhsb:aFByUiXi8SWns8k78jIA/NoPKBhUhHcJ

Score

N/A

Malware Config

Signatures

Files

5b6b8d18fbb8c5586020b23504782e6170eba5fd1d53e4460f73f578c155b1eb
.exe windows x86

133e0434c46f9e8f4f6448fee5239dbf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_wcsicmp
swscanf
__CxxFrameHandler
free
malloc
_CxxThrowException
memmove
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
wcscpy
wcslen
wprintf

advapi32

RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegConnectRegistryW
RegCloseKey
RegOpenKeyExW

kernel32

GetModuleHandleA
FormatMessageW
VerifyVersionInfoW
VerSetConditionMask
GetLastError
GetFullPathNameW
ExpandEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GlobalLock
GlobalUnlock
GlobalFree
GlobalAlloc

ole32

CoInitializeEx
CoInitializeSecurity
CoUninitialize
CoCreateInstance

oleaut32

SafeArrayGetUBound
SafeArrayGetLBound
SysStringLen
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
VariantChangeType
VariantClear
SysAllocString
SysFreeString

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PACK
Size: 160KB - Virtual size: 416KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

133e0434c46f9e8f4f6448fee5239dbf

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

ole32

oleaut32

Sections

.text Size: 15KB - Virtual size: 15KB

.data Size: 512B - Virtual size: 224B

.rsrc Size: 1024B - Virtual size: 1024B

PACK Size: 160KB - Virtual size: 416KB

.text
Size: 15KB - Virtual size: 15KB

.data
Size: 512B - Virtual size: 224B

.rsrc
Size: 1024B - Virtual size: 1024B

PACK
Size: 160KB - Virtual size: 416KB