c1658020430ad3ba04932b3952e6b6bcd5facedd35369c7d7f7ac0486512bbc4

General

Target

c1658020430ad3ba04932b3952e6b6bcd5facedd35369c7d7f7ac0486512bbc4
Size

802KB
MD5

44c1b3a59130475d25b6b0f7a311bd20
SHA1

37d7d4fa6768aadea11cfb81e57b9a3a9f6dce4c
SHA256

c1658020430ad3ba04932b3952e6b6bcd5facedd35369c7d7f7ac0486512bbc4
SHA512

60eea0abc71905f632334cf771a61b8d36e93402021b893cfcac37af7e9ae8bcbfcd29d9f7574a32a71bdb92f51ddd084b2f8eb9866c9fce2bf69b5ff95781d5
SSDEEP

24576:rsWIOhfJkNTFr8hWt8OTaKVNoVh63NGP0dgDCRkN:rsWIUfJ0TFr8Mt8OZVNoP6F6

Score

N/A

Malware Config

Signatures

Files

c1658020430ad3ba04932b3952e6b6bcd5facedd35369c7d7f7ac0486512bbc4
.exe windows x86

a30626f7800f4d9ba1d442ddeee9cbaf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

HeapFree
GetLastError
GetLogicalDrives
ReadConsoleA
GetPrivateProfileSectionA
GetVolumePathNameW
Sleep
ReadConsoleA
GetStringTypeW
CloseHandle
PulseEvent
VirtualProtect
lstrlenA
ReadConsoleA
FindAtomW
GetStartupInfoA
TlsGetValue
ReleaseMutex
GetDriveTypeA
LoadLibraryW
DeleteFileW

clbcatq

ComPlusMigrate
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
SetupOpen
DllGetClassObject
CheckMemoryGates
SetupOpen
CheckMemoryGates
DllGetClassObject
SetupOpen
ComPlusMigrate
CheckMemoryGates

gpedit

DllGetClassObject
ExportRSoPData
DllCanUnloadNow
BrowseForGPO

Sections

.text
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 1.4MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 795KB - Virtual size: 795KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 289B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.import
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a30626f7800f4d9ba1d442ddeee9cbaf

Headers

File Characteristics

Imports

kernel32

clbcatq

gpedit

Sections

.text Size: 1024B - Virtual size: 1024B

.data Size: 3KB - Virtual size: 3KB

.rdata Size: 512B - Virtual size: 1.4MB

.rsrc Size: 795KB - Virtual size: 795KB

.orpc Size: 512B - Virtual size: 289B

.import Size: 512B - Virtual size: 38B

.text
Size: 1024B - Virtual size: 1024B

.data
Size: 3KB - Virtual size: 3KB

.rdata
Size: 512B - Virtual size: 1.4MB

.rsrc
Size: 795KB - Virtual size: 795KB

.orpc
Size: 512B - Virtual size: 289B

.import
Size: 512B - Virtual size: 38B