e6627fe7b794f7f59bfca31b2e0c45fba992cfc9b4b23326bffbbb7667f9e179

General

Target

e6627fe7b794f7f59bfca31b2e0c45fba992cfc9b4b23326bffbbb7667f9e179
Size

87KB
MD5

17c464a71e3306d5220b4572661470e0
SHA1

8e6104589100160ba1e62dcb387e7118213bcbc4
SHA256

e6627fe7b794f7f59bfca31b2e0c45fba992cfc9b4b23326bffbbb7667f9e179
SHA512

98da84c99ccaa1af368ad9218d1b774d056a6a7bfc1a352b5cb36f1127de5cc221052db19248ba0b1eecf5657843d5287114f056703d6fc05f8615ab0fd5f066
SSDEEP

1536:NRPySmoS7a10Msx26l3J72hqi6Oy4fGusQXl9QfZq2:NNyd/7s0Msx26l57iq3ONeuVrQfZq2

Score

N/A

Malware Config

Signatures

Files

e6627fe7b794f7f59bfca31b2e0c45fba992cfc9b4b23326bffbbb7667f9e179
.exe windows x86

bf20a4be710f22502bdd46f5c3fde96d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_controlfp
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
srand
time
rand
??2@YAPAXI@Z
memmove
_c_exit
_exit
_acmdln
exit
_cexit
_XcptFilter
??3@YAXPAX@Z

kernel32

GetModuleHandleA
LocalAlloc
InterlockedDecrement
CompareFileTime
FileTimeToSystemTime
GetLocalTime
SystemTimeToFileTime
InterlockedIncrement
HeapAlloc
HeapReAlloc
HeapSize
GetProcessHeap
GetStartupInfoA

user32

LoadStringW
RegisterClassW
CreateWindowExW
GetMessageW
TranslateMessage
DispatchMessageW
KillTimer
DefWindowProcW
GetSystemMetrics
DestroyWindow
SetTimer
PostQuitMessage

shell32

SHGetPathFromIDListW
SHGetDesktopFolder
SHGetMalloc

ole32

CoTaskMemAlloc
OleInitialize
OleUninitialize
CoCreateInstance

shlwapi

SHRegGetUSValueW
PathFindFileNameW
StrCmpNW
StrCpyNW
StrCmpW
PathRemoveFileSpecW
PathFileExistsW
StrCatBuffW
PathAppendW
wnsprintfW
SHRegSetUSValueW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bf20a4be710f22502bdd46f5c3fde96d

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

shell32

ole32

shlwapi

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 92B

.rsrc Size: 69KB - Virtual size: 72KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 92B

.rsrc
Size: 69KB - Virtual size: 72KB