b9926cd1d25b8910b100b65d6450ae69ad113d34bbaae891a789e8ed7ddead9c

General

Target

b9926cd1d25b8910b100b65d6450ae69ad113d34bbaae891a789e8ed7ddead9c
Size

36KB
MD5

05d9ccf9efe43eff81169a839109c530
SHA1

161c04b4f24e3386778b064144817acd8deaf28e
SHA256

b9926cd1d25b8910b100b65d6450ae69ad113d34bbaae891a789e8ed7ddead9c
SHA512

1e188fb28b48cf92a3d216c06702393d8d826a56cd6e53a72a22e7e46a648653ab92eae424e05b36d9b9bed3505433decf789ad61e891403b65b06b4f6503aa5
SSDEEP

768:IJfPgtWgKD4GF4C7e7XHdRlLPsdHpXZlF3SKf33XDhSZTNaakhV7HSbPv:PsgKD4Gqj7HLl7kB/L3DhqTNgV7yv

Score

N/A

Malware Config

Signatures

Files

b9926cd1d25b8910b100b65d6450ae69ad113d34bbaae891a789e8ed7ddead9c
.exe windows x86

3cea20f6b662094aa22039afefa13b29

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
LocalFree
GetModuleHandleA
HeapSetInformation
UnhandledExceptionFilter

msvcrt

_XcptFilter
__wgetmainargs
_wcsicmp
_cexit
_exit
_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
exit

msi

ord201
ord173

ole32

CoUninitialize
CoCreateInstance
CoInitializeEx

sfc

SfcIsFileProtected

shell32

SHGetPathFromIDListW

shlwapi

PathFindExtensionW

advapi32

RegCloseKey
RegCreateKeyExW
RegSetKeyValueW

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cjpwjdb
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3cea20f6b662094aa22039afefa13b29

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

msi

ole32

sfc

shell32

shlwapi

advapi32

Sections

.text Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 904B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 27KB - Virtual size: 28KB

cjpwjdb Size: - Virtual size: 4KB

.text
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 904B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 27KB - Virtual size: 28KB

cjpwjdb
Size: - Virtual size: 4KB