f6a0e98f2fbf8b1cbc8bfd91560ea59b70b08c0ae6aa9baf0e3646ef4301e3f4

General

Target

f6a0e98f2fbf8b1cbc8bfd91560ea59b70b08c0ae6aa9baf0e3646ef4301e3f4
Size

794KB
MD5

08f3a2d589657c4bffdcb1361bb759a1
SHA1

e3be76c8bc71262ed8f7598d85db8c297319ee1c
SHA256

f6a0e98f2fbf8b1cbc8bfd91560ea59b70b08c0ae6aa9baf0e3646ef4301e3f4
SHA512

8e0ae15da19d37b9af75801f0789f9edf7ade3c125c3422cc1c130613f63fbf9ff8b6ecba6d3e7e8f5ad952192aed53f15d9e8244bce2855a73023251dea1ae4
SSDEEP

12288:2Y6movxCXHwE6N1wk5OyGopHZOkAYQD6V2syPMunHeaghQ8kRqgoNIMR0to2:xXHfKOyp5ZrVQDq2sGhn+DQEEW

Score

N/A

Malware Config

Signatures

Files

f6a0e98f2fbf8b1cbc8bfd91560ea59b70b08c0ae6aa9baf0e3646ef4301e3f4
.exe windows x86

18673a88a098131e548e3384c8e7fec3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
ReadConsoleA
LoadLibraryW
ReleaseMutex
VirtualProtect
PulseEvent
GetStringTypeW
lstrlenA
GetPrivateProfileSectionA
GetVolumePathNameW
TlsGetValue
GetDriveTypeA
FindAtomW
ReadConsoleA
GetLastError
ReadConsoleA
GetStartupInfoA
Sleep
GetLogicalDrives
HeapFree
DeleteFileW

clbcatq

CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
CheckMemoryGates
SetupOpen
DllGetClassObject
DllGetClassObject
SetupOpen
SetupOpen
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
ComPlusMigrate

gpedit

DllGetClassObject
DllCanUnloadNow
ExportRSoPData
BrowseForGPO

Sections

.text
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 1.4MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 787KB - Virtual size: 787KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 289B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.import
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

18673a88a098131e548e3384c8e7fec3

Headers

File Characteristics

Imports

kernel32

clbcatq

gpedit

Sections

.text Size: 1024B - Virtual size: 1024B

.data Size: 3KB - Virtual size: 3KB

.rdata Size: 512B - Virtual size: 1.4MB

.rsrc Size: 787KB - Virtual size: 787KB

.orpc Size: 512B - Virtual size: 289B

.import Size: 512B - Virtual size: 38B

.text
Size: 1024B - Virtual size: 1024B

.data
Size: 3KB - Virtual size: 3KB

.rdata
Size: 512B - Virtual size: 1.4MB

.rsrc
Size: 787KB - Virtual size: 787KB

.orpc
Size: 512B - Virtual size: 289B

.import
Size: 512B - Virtual size: 38B