0d37ce58f5e9f98abeb601f77b818733170fc7fe89b6400ef56e6d380470db61

General

Target

0d37ce58f5e9f98abeb601f77b818733170fc7fe89b6400ef56e6d380470db61
Size

46KB
MD5

45af0ade5c61e088630980370b910fa2
SHA1

514d02025e750e2581255988f96db1763329a959
SHA256

0d37ce58f5e9f98abeb601f77b818733170fc7fe89b6400ef56e6d380470db61
SHA512

12afd16b27793263b0e3789bf8de06a2542c125f8512b9f423ecd7c4d287b24b5da86131cbe9cea2817cd7f754ffabb6189f8ba64815579516963b428eb5ef1e
SSDEEP

768:E8B0MmvlPb8kJPnkg4hVJp4F4Q+OHBFYihhpmvhVFQaOJKPEfomnrm2D6/j:r/mvpb8Q2hV74F4Qlt5GVF+0urNSj

Score

N/A

Malware Config

Signatures

Files

0d37ce58f5e9f98abeb601f77b818733170fc7fe89b6400ef56e6d380470db61
.dll windows x86

0a3b2bffe007b8b635a5b5bd4ccf7485

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetLastError
GetComputerNameW
GetProcAddress
lstrlenW
LoadLibraryW
CloseHandle
LocalAlloc
SetLastError
FileTimeToSystemTime
SystemTimeToFileTime
GetSystemTime
WritePrivateProfileStringW
GetCommandLineA
CreateDirectoryW
lstrcatW
lstrcpyW
HeapFree
GetProcessHeap
GetVersion
VirtualProtect
GetTickCount
LocalFree

user32

LoadStringW
wvsprintfW

advapi32

RegDeleteKeyW
CryptAcquireContextW
CopySid
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
CloseServiceHandle
CheckTokenMembership
RevertToSelf
RegCreateKeyExW
ReportEventW
GetLengthSid
RegCloseKey
CryptGenKey
CryptDestroyKey
CryptReleaseContext
GetUserNameW

ole32

CoUninitialize
CoCreateInstance

rpcrt4

RpcStringFreeW
UuidCreate
UuidToStringW

msvcrt

_except_handler3
_adjust_fdiv
_initterm
free
malloc
swprintf
wcslen
wcstok
__CxxFrameHandler
wcscpy

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 918B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a3b2bffe007b8b635a5b5bd4ccf7485

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

rpcrt4

msvcrt

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 34KB - Virtual size: 66KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 918B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 34KB - Virtual size: 66KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 918B