3ee5068364c685daa00b23a51fa36f3cf3a12c4f153820a2da693f9ef09a1644

General

Target

3ee5068364c685daa00b23a51fa36f3cf3a12c4f153820a2da693f9ef09a1644
Size

240KB
MD5

743f687be53a4526f40728105c594db9
SHA1

b852721837aa2128e67a13030fe9505558b04580
SHA256

3ee5068364c685daa00b23a51fa36f3cf3a12c4f153820a2da693f9ef09a1644
SHA512

85b8599180729b9e022dd309d55a1a3c6cf4d855ab957a29caadafe6ea948ffdf21c0fe03635e68db40e7c47c0f046223e35bfd08c97720a9dd4570184ca58fd
SSDEEP

6144:a71AYVHmUYWqi4D33iM34bLBuVepqiBE4RMSNxT2OeN:KbV72H93+9uMciSiMSNxTW

Score

N/A

Malware Config

Signatures

Files

3ee5068364c685daa00b23a51fa36f3cf3a12c4f153820a2da693f9ef09a1644
.exe windows x86

25ac6ac321f08927f613d46b0bbd3960

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GlobalAlloc
ReadFile
QueryPerformanceFrequency
CreateFileA
QueryPerformanceCounter
SetFilePointer
GetFileSize
SetEndOfFile
DeviceIoControl
CloseHandle
WriteFile
GetLastError
GetModuleFileNameA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetProcAddress
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetSystemDirectoryA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

advapi32

RegSetValueExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 192KB - Virtual size: 1.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

25ac6ac321f08927f613d46b0bbd3960

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 11KB

.vmp0 Size: 192KB - Virtual size: 1.3MB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 11KB

.vmp0
Size: 192KB - Virtual size: 1.3MB