01755ce3b7136315444e75bcdeeab67a048dcfdbea009510c1446d227bd2b01d

Sharing

Copy URL Twitter E-mail

General

Target

01755ce3b7136315444e75bcdeeab67a048dcfdbea009510c1446d227bd2b01d
Size

1.2MB
MD5

17a2a1b1844c8be661c6e6597b757aa0
SHA1

2a546908d06472373e442a3510e217f9544041e8
SHA256

01755ce3b7136315444e75bcdeeab67a048dcfdbea009510c1446d227bd2b01d
SHA512

edd2cea78dac19abf842bc93303e8f162ba734eeaf706b44cdcc686c7d884d86c9c0ced09219676bfee51dfeeaa3952ed326e3be9c71b447b0cf39c0787190c1
SSDEEP

12288:fYl+G2yJQHVeX2TALwSDPqY8JbEaY4Eug1Rp7WzxW+T0y5T9r1+2Y2fBwIKi:A0IJOVeX2MLj2nJb18fGnIy3r1R1wf

Score

N/A

Malware Config

Signatures

Files

01755ce3b7136315444e75bcdeeab67a048dcfdbea009510c1446d227bd2b01d
.exe windows x86

de1d4b78c21e2f3757d26e119ce08a55

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

RegSetValueA

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
CreateFileW
CreateProcessA
DeleteFileA
EnterCriticalSection
ExitProcess
GetACP
GetCPInfo
GetCommandLineA
GetCurrentDirectoryA
GetCurrentThreadId
GetDateFormatA
GetDriveTypeA
GetEnvironmentStrings
GetExitCodeProcess
GetFileAttributesA
GetFileAttributesW
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
LocalAlloc
LocalFree
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetCurrentDirectoryA
SetEnvironmentVariableA
SetFileAttributesA
SetFilePointer
SetHandleCount
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile

shell32

ShellExecuteA

user32

EnumThreadWindows
MessageBoxA
MessageBoxExA

Exports

Exports

@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 61KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de1d4b78c21e2f3757d26e119ce08a55

Headers

File Characteristics

Imports

advapi32

kernel32

shell32

user32

Exports

Exports

Sections

.text Size: 61KB - Virtual size: 64KB

.data Size: 12KB - Virtual size: 28KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 4KB

.text
Size: 61KB - Virtual size: 64KB

.data
Size: 12KB - Virtual size: 28KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 4KB