5825ec391ed53e84445cdf7ea956733ed01eec54de6d4ba32026d1f978389db4

General

Target

5825ec391ed53e84445cdf7ea956733ed01eec54de6d4ba32026d1f978389db4
Size

378KB
MD5

0d9c86db972a7fdaad3c46dd47b4f4b0
SHA1

177ad68c4781ed0654cfcf3f87cf99c050aa5478
SHA256

5825ec391ed53e84445cdf7ea956733ed01eec54de6d4ba32026d1f978389db4
SHA512

1e125c016da45fd53bd4c69b52178c8c51006f815c0c9fa6b387757226dd01e7b3a902c3fb569d633819e352eab5bb51842dc8605190c12e782f34642cd428be
SSDEEP

6144:XsFLl9H3uYaEL5qZdJp3MePSJsqyCIWxlxc5dUK0E56Y+R/OXiwx42LAYQPuXfmr:YHqXZPpc19yXWxPc5dkM6YscBTAYQYfw

Score

N/A

Malware Config

Signatures

Files

5825ec391ed53e84445cdf7ea956733ed01eec54de6d4ba32026d1f978389db4
.exe windows x86

507bee943e91c2a2eec56b786d90aff0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueW
GetAce
GetSidIdentifierAuthority
RegQueryValueExW
CopySid
QueryServiceStatus
IsValidSid
OpenProcessToken
MapGenericMask
RegOpenKeyW
AdjustTokenPrivileges

ntdll

NtSetSystemEnvironmentValue
ZwQueueApcThread
ZwSetUuidSeed
_vsnprintf
RtlAllocateHeap
RtlLookupElementGenericTable
NtOpenProcessToken
NtQueryInformationFile
ZwEnumerateValueKey
LdrAccessResource
ZwSuspendThread
RtlUnicodeToCustomCPN

ole32

OleSetClipboard
OleCreateStaticFromData
CoCreateInstance
OleSetContainedObject
OleRegEnumFormatEtc
CoGetPSClsid
OleRegGetMiscStatus
CoMarshalInterface
OleUninitialize
OleCreateLinkFromDataEx
OleCreateLinkToFileEx
CoRegisterMessageFilter
CoMarshalHresult

msvcrt

__p__commode
__dllonexit
fseek
strstr
strtol
_initterm
strncpy
__setusermatherr
wcsrchr
_adjust_fdiv
memset
strcspn

kernel32

GetCurrentThreadId
VirtualAlloc
VirtualFree
GetCurrentProcessId
VirtualLock
GetModuleHandleA
GetTickCount
LocalReAlloc
SetConsoleFont
ClearCommBreak
GetWindowsDirectoryA

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

507bee943e91c2a2eec56b786d90aff0

Headers

File Characteristics

Imports

advapi32

ntdll

ole32

msvcrt

kernel32

Sections

.text Size: 47KB - Virtual size: 47KB

.data Size: 1KB - Virtual size: 81KB

.rsrc Size: 1024B - Virtual size: 944B

.text
Size: 47KB - Virtual size: 47KB

.data
Size: 1KB - Virtual size: 81KB

.rsrc
Size: 1024B - Virtual size: 944B