17e304df7b48678e474ffadd7f1d6c0bc7eb6dab2f7c028b727b5d30308be7a9

Sharing

Copy URL Twitter E-mail

General

Target

17e304df7b48678e474ffadd7f1d6c0bc7eb6dab2f7c028b727b5d30308be7a9
Size

124KB
MD5

2176638f729b80deda6d95e4031b0e70
SHA1

397c4bef6914ce0a430827a6b3ae755687103a98
SHA256

17e304df7b48678e474ffadd7f1d6c0bc7eb6dab2f7c028b727b5d30308be7a9
SHA512

9abebbaa80db8177c1724979e17d39facc97999a9af7aba7565d377857373d08eb265e068501afb701b00fc0a0b1bb4de626a929e7848e753b25f6a0ad6134f9
SSDEEP

3072:CFIPIlYC+3Huz4OOOOOOOOOOOOOOOOOOOuq4nZieHkb8+JUl:CFaR+zl4nZieHkQEI

Score

N/A

Malware Config

Signatures

Files

17e304df7b48678e474ffadd7f1d6c0bc7eb6dab2f7c028b727b5d30308be7a9
.exe windows x86

45745bee697dbbf99dfb8411c313ec78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetDriveTypeA
GetLogicalDriveStringsA
MoveFileExA
GetFileAttributesA
GetWindowsDirectoryA
GetCommandLineW
ReadFile
GetFileSize
SetFileAttributesA
GetLastError
LocalAlloc
DeleteFileA
LocalFree
GetModuleFileNameA
FindFirstFileA
FindNextFileA
FindClose
CreateFileA
WriteFile
WinExec
CloseHandle
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
RaiseException

advapi32

CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
OpenSCManagerA
EnumServicesStatusA
OpenServiceA
QueryServiceConfigA
DeleteService
CloseServiceHandle
CryptAcquireContextA

shell32

CommandLineToArgvW

shlwapi

SHGetValueA
SHSetValueA
SHDeleteValueA
StrStrIA
PathFileExistsA

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kmdhanj
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

45745bee697dbbf99dfb8411c313ec78

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

shlwapi

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 79KB - Virtual size: 79KB

kmdhanj Size: - Virtual size: 4KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 79KB - Virtual size: 79KB

kmdhanj
Size: - Virtual size: 4KB