756d7892bdc6aeecdea7aff4dff8e2e45cd60f9b14fd3ead999f9488316d9791

Sharing

Copy URL Twitter E-mail

General

Target

756d7892bdc6aeecdea7aff4dff8e2e45cd60f9b14fd3ead999f9488316d9791
Size

185KB
MD5

0985e19249e602c6b9eded369082bae7
SHA1

64d2f2525c34b0ccf6ee88b72569274d196c8c1b
SHA256

756d7892bdc6aeecdea7aff4dff8e2e45cd60f9b14fd3ead999f9488316d9791
SHA512

9b5ed08a244569b6951ba701dd8cea6d37211af01ad3c8094f5f74dba4ee4abb94b9721202cc800abc66126b35238a64a5b6b79204975fdbc59d32eec287fa8a
SSDEEP

3072:tI1Rz2ee9ZRng9f0JSZ/E0sdNxd1eImVFm51/zduZQz/rbl7Wgb1x1ca3+:tI1Rzg/gVS2/EVmjm5NzduKbrb5PCZ

Score

N/A

Malware Config

Signatures

Files

756d7892bdc6aeecdea7aff4dff8e2e45cd60f9b14fd3ead999f9488316d9791
.exe windows x86

c0dcac3f5ebe5a3c502a3732c67d7e71

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemWindowsDirectoryW

Exports

Exports

RoRequest
?RenameCommand@@YG_JPAUIRootStorage@@PAUHUMPD__@@@Z
?RenameHerbal@@YG_JPAUIRootStorage@@PAUHUMPD__@@@Z
?RenameLoadMac@@YG_JPAUIRootStorage@@PAUHUMPD__@@@Z
?RenameOptimize@@YG_JPAUIRootStorage@@PAUHUMPD__@@@Z
?VirtualGate@@YG_JPAUIRootStorage@@PAUHUMPD__@@@Z
?ZeroPointW@@YG_JPAUIRootStorage@@PAUHUMPD__@@@Z

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.conas
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.const
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ts050
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ts040
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ts030
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ts020
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ts010
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0dcac3f5ebe5a3c502a3732c67d7e71

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 25KB

.conas Size: 512B - Virtual size: 64B

.const Size: 512B - Virtual size: 64B

.data Size: 3KB - Virtual size: 2KB

.ts050 Size: 23KB - Virtual size: 23KB

.ts040 Size: 30KB - Virtual size: 29KB

.ts030 Size: 30KB - Virtual size: 29KB

.ts020 Size: 30KB - Virtual size: 29KB

.ts010 Size: 38KB - Virtual size: 37KB

.rsrc Size: 1KB - Virtual size: 206KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 25KB - Virtual size: 25KB

.conas
Size: 512B - Virtual size: 64B

.const
Size: 512B - Virtual size: 64B

.data
Size: 3KB - Virtual size: 2KB

.ts050
Size: 23KB - Virtual size: 23KB

.ts040
Size: 30KB - Virtual size: 29KB

.ts030
Size: 30KB - Virtual size: 29KB

.ts020
Size: 30KB - Virtual size: 29KB

.ts010
Size: 38KB - Virtual size: 37KB

.rsrc
Size: 1KB - Virtual size: 206KB

.reloc
Size: 2KB - Virtual size: 1KB