7515e7e961ae946c24150a9a9279a62f68fd2f9aa4c9ad8de050a9064f8c78a3

Sharing

Copy URL

Twitter E-mail

General

Target

7515e7e961ae946c24150a9a9279a62f68fd2f9aa4c9ad8de050a9064f8c78a3
Size

50KB
MD5

2fed767451aaa5d13ace29bdc5d19a90
SHA1

9c8154f6c84477de7e4e687a3550667f6dd3950d
SHA256

7515e7e961ae946c24150a9a9279a62f68fd2f9aa4c9ad8de050a9064f8c78a3
SHA512

b7686e34e1c130b2eb9ad4b33b3194fca5a6575428be318e37c3bb0dfa55f4a7c4b78da96c56aa59b53c075f9f60eddcb050d395802521f0f8ab797fb88d2a74
SSDEEP

768:SIXbCaQ+/CeaaSTZCqB2xgpidq0Lpm6m4m303ziYIHNQ79liFc:bOaDCNfTZtB27w6mxkFIG79liFc

Score

N/A

Malware Config

Signatures

Files

7515e7e961ae946c24150a9a9279a62f68fd2f9aa4c9ad8de050a9064f8c78a3
.exe windows x86

82236394277ed994f0a1a2795a424493

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtSetDefaultLocale
ZwEnumerateBootEntries
ZwCreatePagingFile
NtMapViewOfSection
NtLoadKey2
NtQueryInformationPort
NtSaveKey
ZwTestAlert
RtlAreAllAccessesGranted
ZwPlugPlayControl
RtlIsValidIndexHandle
ZwQuerySystemEnvironmentValue
LdrAddRefDll
ZwSecureConnectPort
ZwCreateKeyedEvent
NtQuerySystemInformation
ZwOpenTimer
RtlInterlockedPushEntrySList
NtSetInformationFile
NtOpenThreadToken
ZwDeleteKey
RtlApplicationVerifierStop
RtlCopyLuidAndAttributesArray
RtlUnhandledExceptionFilter2
ZwTerminateProcess
pow
NtSetEaFile
NtQueryInformationAtom
RtlGetLastWin32Error
ZwAccessCheckAndAuditAlarm
LdrShutdownThread
RtlAllocateHeap

kernel32

LZOpenFileA
FillConsoleOutputCharacterW
SetFirmwareEnvironmentVariableA
PrepareTape
GetCurrentProcessId
GetLocaleInfoA
GetDiskFreeSpaceExA
GetDevicePowerState
LoadLibraryA
SetFileApisToANSI
RegisterConsoleIME
GetNamedPipeInfo
SetConsoleIcon
EnumSystemLocalesW
GetCPInfo
IsBadHugeReadPtr
FileTimeToSystemTime
lstrcmpi
PrivCopyFileExW
EnumSystemCodePagesW

crtdll

wcstok
strcat
_cputs
_mbccpy
wcstol
_mbsnbcat
_utime
_c_exit
atexit
_wcslwr
_setsystime
_baseversion_dll

ole32

OleDoAutoConvert
CoInvalidateRemoteMachineBindings
CoGetDefaultContext
DllGetClassObject
CoResumeClassObjects
CoTreatAsClass
OleCreateFromFileEx
CoGetStdMarshalEx
CoGetInterceptor
HENHMETAFILE_UserFree
ReadOleStg
CreateOleAdviseHolder
HMENU_UserMarshal
CreateAntiMoniker
CoAllowSetForegroundWindow
OleQueryCreateFromData
CreateDataAdviseHolder
ComPs_NdrDllGetClassObject
CoUninitialize
OleGetIconOfClass
WdtpInterfacePointer_UserSize
HMETAFILE_UserUnmarshal
HACCEL_UserMarshal
WdtpInterfacePointer_UserUnmarshal
OleRegGetMiscStatus

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

82236394277ed994f0a1a2795a424493

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

kernel32

crtdll

ole32

Sections

.text Size: 32KB - Virtual size: 32KB

.rdata Size: 3KB - Virtual size: 3KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 6KB - Virtual size: 5KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 32KB - Virtual size: 32KB

.rdata
Size: 3KB - Virtual size: 3KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 1KB - Virtual size: 1KB