754d45a5f8dee27086fc711377c9084399798c28b16841bb12d947f8149cfb96

General

Target

754d45a5f8dee27086fc711377c9084399798c28b16841bb12d947f8149cfb96
Size

240KB
MD5

0ebbac8e2c9174c5a9dc89931d7ea643
SHA1

f262ea70e1b013e4c5242216adddf90f49e43fa8
SHA256

754d45a5f8dee27086fc711377c9084399798c28b16841bb12d947f8149cfb96
SHA512

4238a820a2a306cf618aa6d6cfa5768e3d31a344563cde058369e6a4d7e83a2b89d72ffbdd8bec995b623b8269b8bcc2a2ec1947fb551f5721e15b0a63cb7114
SSDEEP

3072:hlB9mtw2cksuosL30YYcVrcKh7Bc6InZDdXMhMzQtERZSxNxP7p:Kw2fsc307YybnZDZMMlRkJ

Score

N/A

Malware Config

Signatures

Files

754d45a5f8dee27086fc711377c9084399798c28b16841bb12d947f8149cfb96
.exe windows x86

d284bb7ae6f473acf96fea3cd5ad3ef9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsA
GetModuleFileNameA
CreateProcessA
CloseHandle
GetModuleHandleA
GetStartupInfoA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegEnumKeyExA

msvcrt

fprintf
_iob
strncpy
_snprintf
strrchr
__p___argc
__p___argv
strcpy
strlen
_fullpath
getenv
strcmp
fclose
fopen
malloc
??2@YAPAXI@Z
ftell
fseek
memcpy
memset
strpbrk
strtol
strchr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
free
fread
_access
_strdup

Exports

Exports

?PL_DHashStubEnumRemove@@YA?AW4PLDHashOperator@@PAUPLDHashTable@@PAUPLDHashEntryHdr@@IPAX@Z

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d284bb7ae6f473acf96fea3cd5ad3ef9

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 5KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 936B

.text Size: 216KB - Virtual size: 216KB

.text
Size: 8KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 936B

.text
Size: 216KB - Virtual size: 216KB