6678ff966e942e4bf669d8a240acbab79971c871152f3c16478a3ec0c3f5c805

General

Target

6678ff966e942e4bf669d8a240acbab79971c871152f3c16478a3ec0c3f5c805
Size

140KB
MD5

72f8875552ce183d41ad016af06be683
SHA1

e50b9dde42ce3aa8c5387dbaaeacd0b2af76962a
SHA256

6678ff966e942e4bf669d8a240acbab79971c871152f3c16478a3ec0c3f5c805
SHA512

f88dad25ea449ee7940a2c9c7892ba0363bff87796fd7ca794b1538ecccc31060e685305110cf9b65b14c1253fc010d419ee1a9205aff5ff5b43901f267bc478
SSDEEP

3072:b30yC722pItB7Lin2IaQP2mNVeAn5o0hEXk1PX:b30j2iItBO0GDfF

Score

N/A

Malware Config

Signatures

Files

6678ff966e942e4bf669d8a240acbab79971c871152f3c16478a3ec0c3f5c805
.exe windows x86

4efcffd1025f17182f00e41c970c9d81

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupQueueDefaultCopyA

advapi32

GetNamedSecurityInfoA

kernel32

CompareStringW
SetHandleCount
GetTickCount
GetPriorityClass
CreateMutexA
GetModuleHandleW
lstrcmpA
VirtualAlloc
GetCurrentThread
GetEnvironmentStrings
InterlockedExchange
lstrlenW
WaitForSingleObject
CreateFileA
lstrlenA
GetStringTypeW
ReadFile
SetLastError
HeapDestroy
FreeEnvironmentStringsW
GetSystemInfo
GetCurrentProcessId
GetEnvironmentStringsW
GetCommandLineW
CreateSemaphoreA
GetVersionExA
GetCommandLineA
RtlUnwind
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
VirtualQuery
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
WideCharToMultiByte
GetLastError
SetEnvironmentVariableA
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
Sleep
HeapReAlloc
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetLocaleInfoW
LCMapStringA
LCMapStringW
GetStringTypeA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetTimeZoneInformation
CompareStringA

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4efcffd1025f17182f00e41c970c9d81

Headers

File Characteristics

Imports

setupapi

advapi32

kernel32

Sections

.text Size: 76KB - Virtual size: 74KB

.data Size: 52KB - Virtual size: 50KB

.rsrc Size: 8KB - Virtual size: 4KB

.text
Size: 76KB - Virtual size: 74KB

.data
Size: 52KB - Virtual size: 50KB

.rsrc
Size: 8KB - Virtual size: 4KB