f2263edcea8a35569f554a878b30ada19188628e71982c333eab03e07224e58c

General

Target

f2263edcea8a35569f554a878b30ada19188628e71982c333eab03e07224e58c
Size

620KB
MD5

0f4c5152572468acaac2747f9fa67240
SHA1

a278513a16b12b552cedd1ed7eb316e01498f488
SHA256

f2263edcea8a35569f554a878b30ada19188628e71982c333eab03e07224e58c
SHA512

e661c3e27a519a2b75bebd1ac99779e111653fa60792c8e5a950d8315e7605ac29eb4a3eb88ff540bdba890190761abd883376fcefaab0791f0b757b13d79725
SSDEEP

12288:G3I+4YS7xCfNYAD6ZC/cb7koYQE4o01Dyh3KG/tN051qjuZEPQUkTyTPuHL4ZI0w:GP4js2AD6ZC/cb7koYQE4o01Dyh3KG/c

Score

N/A

Malware Config

Signatures

Files

f2263edcea8a35569f554a878b30ada19188628e71982c333eab03e07224e58c
.exe windows x64

9183f00e76a251e104527e3fd66f98fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA

kernel32

DeleteFileA
FreeLibrary
FormatMessageA
RegisterApplicationRestart
GetSystemDirectoryA
MultiByteToWideChar
GetLastError
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
HeapSetInformation
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
RtlCaptureContext

user32

MessageBoxW
LoadStringW

msvcrt

exit
__getmainargs
__C_specific_handler
_XcptFilter
_exit
_ismbblead
_cexit
_acmdln
_initterm
_amsg_exit
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
getenv
vfprintf
_vsnprintf
fprintf
fopen
fgets
_errno
fflush
strerror
malloc
free
_fsopen
fputs
fclose
_vsnwprintf
memset

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 584KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9183f00e76a251e104527e3fd66f98fb

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

msvcrt

Sections

.text Size: 20KB - Virtual size: 18KB

.data Size: 4KB - Virtual size: 1KB

.pdata Size: 4KB - Virtual size: 792B

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 584KB - Virtual size: 1.9MB

.text
Size: 20KB - Virtual size: 18KB

.data
Size: 4KB - Virtual size: 1KB

.pdata
Size: 4KB - Virtual size: 792B

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 584KB - Virtual size: 1.9MB