f75a0fcde549ebb4e54a614c4af519c1163194599eeb1f093647227f65bf0414

Sharing

Copy URL Twitter E-mail

General

Target

f75a0fcde549ebb4e54a614c4af519c1163194599eeb1f093647227f65bf0414
Size

185KB
MD5

069c294753cf396f08c83f13119917e5
SHA1

345c178279165a0c47da440fccfaeb735ccf3ee1
SHA256

f75a0fcde549ebb4e54a614c4af519c1163194599eeb1f093647227f65bf0414
SHA512

5e3e466ef901c5978f631967bfa6bf5e16d3101080e445d547c99f75430e103a09907a8c0032b1ac0098e138533433bb7532ac5af9f966bdf78e6c3f59ef5e0b
SSDEEP

3072:tI1Rz2ee9ZRng9f0JkZ/E0sdNxd1eImVFm51/zduZQz/rbl7Wgb1x1ca3+:tI1Rzg/gVSo/EVmjm5NzduKbrb5PCZ

Score

N/A

Malware Config

Signatures

Files

f75a0fcde549ebb4e54a614c4af519c1163194599eeb1f093647227f65bf0414
.exe windows x86

c0dcac3f5ebe5a3c502a3732c67d7e71

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemWindowsDirectoryW

Exports

Exports

RoRequest
?RenameCommand@@YG_JPAUIRootStorage@@PAUHUMPD__@@@Z
?RenameHerbal@@YG_JPAUIRootStorage@@PAUHUMPD__@@@Z
?RenameLoadMac@@YG_JPAUIRootStorage@@PAUHUMPD__@@@Z
?RenameOptimize@@YG_JPAUIRootStorage@@PAUHUMPD__@@@Z
?VirtualGate@@YG_JPAUIRootStorage@@PAUHUMPD__@@@Z
?ZeroPointW@@YG_JPAUIRootStorage@@PAUHUMPD__@@@Z

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.conas
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.const
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ts050
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ts040
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ts030
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ts020
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ts010
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0dcac3f5ebe5a3c502a3732c67d7e71

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 25KB

.conas Size: 512B - Virtual size: 64B

.const Size: 512B - Virtual size: 64B

.data Size: 3KB - Virtual size: 2KB

.ts050 Size: 23KB - Virtual size: 23KB

.ts040 Size: 30KB - Virtual size: 29KB

.ts030 Size: 30KB - Virtual size: 29KB

.ts020 Size: 30KB - Virtual size: 29KB

.ts010 Size: 38KB - Virtual size: 37KB

.rsrc Size: 1KB - Virtual size: 206KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 25KB - Virtual size: 25KB

.conas
Size: 512B - Virtual size: 64B

.const
Size: 512B - Virtual size: 64B

.data
Size: 3KB - Virtual size: 2KB

.ts050
Size: 23KB - Virtual size: 23KB

.ts040
Size: 30KB - Virtual size: 29KB

.ts030
Size: 30KB - Virtual size: 29KB

.ts020
Size: 30KB - Virtual size: 29KB

.ts010
Size: 38KB - Virtual size: 37KB

.rsrc
Size: 1KB - Virtual size: 206KB

.reloc
Size: 2KB - Virtual size: 1KB