cbe358e9d0b5d244b1da9126c7fbd72b4868ec81fb3067f2033901b334eb5545

Sharing

Copy URL

Twitter E-mail

General

Target

cbe358e9d0b5d244b1da9126c7fbd72b4868ec81fb3067f2033901b334eb5545
Size

151KB
MD5

43c8d2cf99ff4352cb24e10ad9d62f35
SHA1

4cce599b9b83dd9fe6daf79e506a9d8b35837b6c
SHA256

cbe358e9d0b5d244b1da9126c7fbd72b4868ec81fb3067f2033901b334eb5545
SHA512

cb1ae9dd27cfbd55d5228a7d2731a9559012ff68a2c8e04fa14fda1e93db85a9add103d86712d1049b2eaec7baed4be5d709a10d3dbae5cefd32e9e5a6f02a66
SSDEEP

3072:O3McZrbfPZaIrZ6lyQKFUtDcdDXMlSsksNlxAzcqcB4bS9fogFnv:OjpnZaIFRhdD5sNNleIqcoefvN

Score

N/A

Malware Config

Signatures

Files

cbe358e9d0b5d244b1da9126c7fbd72b4868ec81fb3067f2033901b334eb5545
.exe windows x86

56c2d2ac3baaec694c0d49e0454cdca8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
GetWindowsDirectoryA
MoveFileA
GetFileAttributesA
GetModuleFileNameA
Sleep
DeleteFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
ReadFile
SetFilePointer
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
CreateFileA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetEndOfFile
GetTimeZoneInformation
CompareStringW
SetEnvironmentVariableA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetFullPathNameA
GetCurrentDirectoryA

advapi32

RegSetValueExA
RegDeleteValueA
RegCreateKeyExA

Exports

Exports

NR_RegAddKey
NR_RegAddKeyRaw
NR_RegClose
NR_RegDeleteEntry
NR_RegDeleteKey
NR_RegDeleteKeyRaw
NR_RegEnumEntries
NR_RegEnumSubkeys
NR_RegFlush
NR_RegGetEntry
NR_RegGetEntryInfo
NR_RegGetEntryString
NR_RegGetKey
NR_RegGetKeyRaw
NR_RegGetUsername
NR_RegIsWritable
NR_RegOpen
NR_RegSetBufferSize
NR_RegSetEntry
NR_RegSetEntryString
NR_RegSetUsername
NR_ShutdownRegistry
NR_StartupRegistry
VR_Close
VR_CreateRegistry
VR_Enum
VR_EnumUninstall
VR_GetDefaultDirectory
VR_GetPath
VR_GetRefCount
VR_GetUninstallUserName
VR_GetVersion
VR_InRegistry
VR_Install
VR_Remove
VR_SetDefaultDirectory
VR_SetRefCount
VR_SetRegDirectory
VR_UninstallAddFileToList
VR_UninstallCreateNode
VR_UninstallDeleteFileFromList
VR_UninstallDeleteSharedFilesKey
VR_UninstallDestroy
VR_UninstallEnumSharedFiles
VR_UninstallFileExistsInList
VR_ValidateComponent

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.prdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

56c2d2ac3baaec694c0d49e0454cdca8

Headers

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 47KB - Virtual size: 46KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 1024B - Virtual size: 936B

.prdata Size: 80KB - Virtual size: 80KB

.text
Size: 47KB - Virtual size: 46KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 1024B - Virtual size: 936B

.prdata
Size: 80KB - Virtual size: 80KB