6ce8c0e388b4b68d3862d6721639c757458be4c5ef33490081a338b17c43d22a

General

Target

6ce8c0e388b4b68d3862d6721639c757458be4c5ef33490081a338b17c43d22a
Size

408KB
MD5

5be1f99891fe6a67801edb8847ee5bb8
SHA1

66f3abf2bfa0d08aaee16bfbd6c7183ff6831ae1
SHA256

6ce8c0e388b4b68d3862d6721639c757458be4c5ef33490081a338b17c43d22a
SHA512

5fa3d8807086ffdd0dc7d912d389545e1a9369c6f708321b710d2279b6b9ce63abb86d09ff7122121b84e4d1e3449e6d14a4ba37426556364b0a6fb3caa4abeb
SSDEEP

12288:HqfBlvVwfiwKQOQ2QreZ82Bt+HvsVW1FFGHg:HqfLVXswkcsHOWP8H

Score

N/A

Malware Config

Signatures

Files

6ce8c0e388b4b68d3862d6721639c757458be4c5ef33490081a338b17c43d22a
.exe windows x86

f8f274c0756bcd93f3eb7b8f2320de65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetVolumePathNameA
DeleteFileA
GetStartupInfoA
HeapFree
GetCurrentThread
TlsGetValue
CreateEventW
LoadLibraryW
lstrlenA
GetDriveTypeA
SuspendThread
GetPrivateProfileSectionA
GetProcessVersion
GetProcessHeap
CreateEventW
SetLastError
VirtualProtect
FindAtomW
GetStringTypeW
ResumeThread
CreateEventW

clbcatq

CheckMemoryGates
ComPlusMigrate
SetupOpen
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
SetupOpen
DllGetClassObject
ComPlusMigrate
CheckMemoryGates
DllGetClassObject
SetupOpen

gpedit

BrowseForGPO
DllCanUnloadNow
ExportRSoPData
DllGetClassObject

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 401KB - Virtual size: 401KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f8f274c0756bcd93f3eb7b8f2320de65

Headers

File Characteristics

Imports

kernel32

clbcatq

gpedit

Sections

.text Size: 1024B - Virtual size: 768B

.data Size: 3KB - Virtual size: 11KB

.rdata Size: 512B - Virtual size: 472KB

.rsrc Size: 401KB - Virtual size: 401KB

.orpc Size: 512B - Virtual size: 4KB

.text
Size: 1024B - Virtual size: 768B

.data
Size: 3KB - Virtual size: 11KB

.rdata
Size: 512B - Virtual size: 472KB

.rsrc
Size: 401KB - Virtual size: 401KB

.orpc
Size: 512B - Virtual size: 4KB