dc7e2a72f876c60d69672c6e709fa48ef3d6991bebffb185dedb6f405b4587b8

Sharing

Copy URL Twitter E-mail

General

Target

dc7e2a72f876c60d69672c6e709fa48ef3d6991bebffb185dedb6f405b4587b8
Size

196KB
MD5

23026915e46ae1da23df3790ab170980
SHA1

14d42c273ae23a8c359f33a58cb5d3551108bd21
SHA256

dc7e2a72f876c60d69672c6e709fa48ef3d6991bebffb185dedb6f405b4587b8
SHA512

d140ec15ef2814dc58ff9d262f44190d570c9d9f680f262b291d4bc8529191684e96443afcd71e5efdb5906bb35f2722f6aab17bccc285746dacf3ad98e62223
SSDEEP

3072:CzMb1BFGksLvsPbnOwXcnWAzAJm0d3t5Lnm81JTcNeatC7BD5u19xw15vX:CzMnFGNDIOwthBEtwD59X

Score

N/A

Malware Config

Signatures

Files

dc7e2a72f876c60d69672c6e709fa48ef3d6991bebffb185dedb6f405b4587b8
.exe windows x86

9e884ca0db9aa6e0152f3e5cd5629659

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
SetEndOfFile
LCMapStringW
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
ReadFile
LocalFree
InterlockedDecrement
Sleep
GetVersionExA
CreateFileA
SetFilePointer
WriteFile
CloseHandle
GetSystemDirectoryA
GetLastError
LoadLibraryExA
GetProcAddress
LoadLibraryA
FreeLibrary
HeapAlloc
HeapFree
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
RaiseException

advapi32

RegCreateKeyA
RegQueryValueExA
AllocateAndInitializeSid

ole32

CoUninitialize
CoInitializeSecurity
CoInitializeEx
CoCreateInstance

oleaut32

SafeArrayCreate
SafeArrayPutElement
SafeArrayDestroy
SafeArrayGetElement
SysAllocString
VariantInit
SysFreeString
VariantClear

bmapi

ord49
ord5
ord51
ord34
ord99
ord29
ord100
ord46
ord101
ord8
ord90
ord1
ord35
ord3
ord50

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.grdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9e884ca0db9aa6e0152f3e5cd5629659

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

oleaut32

bmapi

Sections

.text Size: 76KB - Virtual size: 73KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 24KB - Virtual size: 27KB

.rsrc Size: 4KB - Virtual size: 1KB

.grdata Size: 80KB - Virtual size: 80KB

.text
Size: 76KB - Virtual size: 73KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 24KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 1KB

.grdata
Size: 80KB - Virtual size: 80KB