5a503126c22d37f90fcc1dca954266777c8692d2f741fe89b555919d6eb3571e

General

Target

5a503126c22d37f90fcc1dca954266777c8692d2f741fe89b555919d6eb3571e
Size

32KB
MD5

0e6852f0814f646a5a7dda8e30350510
SHA1

27ecbb52e2db32245d1bb913e6696ad2d250f2df
SHA256

5a503126c22d37f90fcc1dca954266777c8692d2f741fe89b555919d6eb3571e
SHA512

c21e7168c1f52357b74b9f3e5cf0640d7d269c74bc555221caaae52b58a2380a31a7e97febc280e6b210ef9e5e016a601abaf771dfee29ad7d3d83232a14b060
SSDEEP

768:aP+JmunVg2f7+ylemBSRxyxsUB1S3MAYnXo4G+dU3X:G+BBZM2SRxusUBSkNC3

Score

N/A

Malware Config

Signatures

Files

5a503126c22d37f90fcc1dca954266777c8692d2f741fe89b555919d6eb3571e
.exe windows x86

828f6f5550dcd843e4e9597845a040c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

kernel32

CloseHandle
GetLastError
CreateEventW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

msvcrt

malloc
__getmainargs
_cexit
_exit
_XcptFilter
exit
_initterm
_amsg_exit
__setusermatherr
__p__commode
_callnewh
__set_app_type
??1type_info@@UAE@XZ
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_except_handler4_common
_controlfp
memcpy_s
memmove_s
??0exception@@QAE@ABQBD@Z
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
_CxxThrowException
free
memset
wcschr
??0exception@@QAE@XZ
__CxxFrameHandler3
__p__fmode

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
CLSIDFromString
CoSetProxyBlanket

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

828f6f5550dcd843e4e9597845a040c5

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

ole32

Sections

.text Size: 11KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 18KB - Virtual size: 21KB

.text
Size: 11KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 18KB - Virtual size: 21KB