1f795fb3604c5f62542e4099e2d19e4241f6e021e49baa8a88001935ba8c58d3

General

Target

1f795fb3604c5f62542e4099e2d19e4241f6e021e49baa8a88001935ba8c58d3
Size

88KB
MD5

0981a85f12d72e687024c12027724a28
SHA1

0aa601af8c9cc962ed62f85d72f27125b1d4e842
SHA256

1f795fb3604c5f62542e4099e2d19e4241f6e021e49baa8a88001935ba8c58d3
SHA512

322ea47f543851019d090df217bd075e03796ea1150a0ce077404bb36d8bf7a35ebf286d7781bbcdee64f245c025c132e1e557598455e92e02315eb39d42d990
SSDEEP

768:upXcgj9aUjOxTHmej6l2bP6EJDQvycXa3dLLx+8TztVDdBHy0wy5olhBWiMadUth:za6H6l2HJuRqLLx+yhRy0lT9T

Score

N/A

Malware Config

Signatures

Files

1f795fb3604c5f62542e4099e2d19e4241f6e021e49baa8a88001935ba8c58d3
.exe windows x86

d6ff6584553692d990734ddcc6c2f84a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadStringW

advapi32

RegCreateKeyExW
RegOpenKeyW
RegEnumKeyExW
RegDeleteKeyW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW

kernel32

GetStdHandle
SetStdHandle
GetTimeZoneInformation
lstrcmpiW
CloseHandle
WaitForSingleObject
CreateMutexW
ReleaseMutex
WriteFile
SetTimeZoneInformation
SetFilePointer
CreateFileW
GetSystemDirectoryW
GetSystemTime
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LCMapStringA
WideCharToMultiByte
LCMapStringW
LoadLibraryA
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetCPInfo
VirtualProtect
GetSystemInfo
FlushFileBuffers

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rqgmcvh
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d6ff6584553692d990734ddcc6c2f84a

Headers

DLL Characteristics

File Characteristics

Imports

user32

advapi32

kernel32

Sections

.text Size: 53KB - Virtual size: 52KB

.data Size: 2KB - Virtual size: 6KB

.rsrc Size: 32KB - Virtual size: 33KB

rqgmcvh Size: - Virtual size: 4KB

.text
Size: 53KB - Virtual size: 52KB

.data
Size: 2KB - Virtual size: 6KB

.rsrc
Size: 32KB - Virtual size: 33KB

rqgmcvh
Size: - Virtual size: 4KB