9fece17ede70fd8f1f5b38990d9b24aef566cfb4892985e3142f2f99be844f7e

General

Target

9fece17ede70fd8f1f5b38990d9b24aef566cfb4892985e3142f2f99be844f7e
Size

247KB
MD5

0d401f3cc578c84df2b041b1d1d245ae
SHA1

5a952adc1c7c8f1b5e24d511480453bd608c1860
SHA256

9fece17ede70fd8f1f5b38990d9b24aef566cfb4892985e3142f2f99be844f7e
SHA512

ce5447f6702f954ec9e43eba0984a55254d4f3f49d539cdf03eeddb42cb6ed6c4d098b413cb1cb6b620283dd054b0a4847bfa6aa7f565016942b80dbb245bf75
SSDEEP

3072:2nxwgxgfR/DVG7wBpEPKlqLYzau2lqdc+tVPk0zl34jHgMvGdGXR/je3GiIB033x:e+xDVG0Bplm+bdzM027gMvG+633eG

Score

N/A

Malware Config

Signatures

Files

9fece17ede70fd8f1f5b38990d9b24aef566cfb4892985e3142f2f99be844f7e
.exe windows x86

3cba1ed6640987387f2c728a00db04c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleFileNameA
_lclose
GlobalHandle
_lopen
GetModuleHandleA
LocalFileTimeToFileTime
SetFileTime
SetErrorMode
GetEnvironmentVariableA
GetCurrentDirectoryA
lstrlenA
FreeLibrary
lstrcpyA
_lwrite
DosDateTimeToFileTime
OpenFileMappingW
CreateDirectoryA
GetWindowsDirectoryA
_lread
GlobalAlloc
FindFirstFileA
GetCommandLineA
_llseek
GetVersion
lstrcatA
ExitProcess
DeviceIoControl
GlobalUnlock
GetSystemDefaultUILanguage
SetConsoleCursorMode
GetTimeZoneInformation
lstrcmpiA
SetCurrentDirectoryA
GetVolumeInformationA
GetDriveTypeA
GlobalFree
_lcreat
FindClose
WinExec
ExitThread
GlobalLock

user32

ShowWindow
GetKeyNameTextA
ChangeDisplaySettingsA
MessageBoxA

advapi32

GetUserNameA
OpenProcessToken
LookupPrivilegeValueA
OpenSCManagerA
OpenServiceA

shlwapi

PathRemoveBlanksA
PathGetDriveNumberW
StrTrimA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug
Size: 158KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lokqtpn
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3cba1ed6640987387f2c728a00db04c4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 5KB - Virtual size: 39KB

.rsrc Size: 2KB - Virtual size: 2KB

.debug Size: 158KB - Virtual size: 159KB

lokqtpn Size: 72KB - Virtual size: 72KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 5KB - Virtual size: 39KB

.rsrc
Size: 2KB - Virtual size: 2KB

.debug
Size: 158KB - Virtual size: 159KB

lokqtpn
Size: 72KB - Virtual size: 72KB