d7ec70cbf6d46e85c961391609fa59dabca71c9a8effadbf97591aa740cf3689

General

Target

d7ec70cbf6d46e85c961391609fa59dabca71c9a8effadbf97591aa740cf3689
Size

206KB
MD5

241228863caf1d93d1e17105406076cd
SHA1

6def4c42b336ed8a7889bafeb51aa68a8913f22c
SHA256

d7ec70cbf6d46e85c961391609fa59dabca71c9a8effadbf97591aa740cf3689
SHA512

55266a6003a22870bf47ea25b35261ad8fb10e4d3e36630189bb7ce9499ea705a4f9e99a2558c583bafdcfe4919dde85fbaa28dca65d9a75846ff37df2ba9606
SSDEEP

6144:27o9z+HMtpTdMj2DGqsIKwo08a2XrhbwP5n1477:20z+wDdDtsVD0gr1wU77

Score

N/A

Malware Config

Signatures

Files

d7ec70cbf6d46e85c961391609fa59dabca71c9a8effadbf97591aa740cf3689
.exe windows x86

b5fc9552c291fa6cdf5d922c56555d57

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetTickCount
FindResourceA
GetLocaleInfoW
lstrlenA
GetOEMCP
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcess
CreateFileA
GetVolumeInformationA
SetUnhandledExceptionFilter
lstrcpyA
CloseHandle
SetLastError
LockResource
HeapAlloc
SystemTimeToFileTime
GetCurrentProcessId
QueryPerformanceCounter
WideCharToMultiByte
lstrcmpA
GetProcessHeap
GetLocalTime
MultiByteToWideChar
QueryDosDeviceA

scecli

SceAppendSecurityProfileInfo
SceCloseProfile
SceAddToObjectList
SceBrowseDatabaseTable
SceAnalyzeSystem
SceAddToNameStatusList

advapi32

RegOpenKeyExA
RegQueryValueExW
RegCloseKey
RegQueryValueExA

secur32

FreeCredentialsHandle
EnumerateSecurityPackagesW
GetComputerObjectNameA
ExportSecurityContext
FreeContextBuffer

schannel

InitializeSecurityContextW
QuerySecurityPackageInfoA
QueryContextAttributesW
MakeSignature
QueryContextAttributesA
QuerySecurityPackageInfoW

Sections

.text
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b5fc9552c291fa6cdf5d922c56555d57

Headers

File Characteristics

Imports

kernel32

scecli

advapi32

secur32

schannel

Sections

.text Size: 134KB - Virtual size: 134KB

.rdata Size: 55KB - Virtual size: 54KB

.data Size: 12KB - Virtual size: 2.3MB

.rcrc Size: 2KB - Virtual size: 2KB

.text
Size: 134KB - Virtual size: 134KB

.rdata
Size: 55KB - Virtual size: 54KB

.data
Size: 12KB - Virtual size: 2.3MB

.rcrc
Size: 2KB - Virtual size: 2KB