0bba3361eba52310d001696a8847cdf6de687e8e502bed578f5f854dc17fc843

General

Target

0bba3361eba52310d001696a8847cdf6de687e8e502bed578f5f854dc17fc843
Size

27KB
MD5

6f6fc4248b6a36c15a5e6c5aa889b52b
SHA1

faa84a7368c502d31b1122d89f5ae8cc0bfad1eb
SHA256

0bba3361eba52310d001696a8847cdf6de687e8e502bed578f5f854dc17fc843
SHA512

df51d3ddb0fae982ca3b80f04f45aae3eabefa20d1b0b505abb1d97b890cccc2a1905d0b2a1ebe1cf859c4b8c1df4d2c2dd30e1b56f2a6e86f819513a6619ca5
SSDEEP

768:0SEji80TFwnD8BGS6O4kIL1Mc4cpyJjU:0S610TaUGqlIL54OyJjU

Score

N/A

Malware Config

Signatures

Files

0bba3361eba52310d001696a8847cdf6de687e8e502bed578f5f854dc17fc843
.exe windows x86

747d1b3651f3a670f3535d8cc0c73833

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegEnumValueA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA

kernel32

GetFileAttributesA
lstrcpyA
MultiByteToWideChar
CopyFileA
SetFileAttributesA
CreateDirectoryA
GetDriveTypeA
lstrcmpiA
GetWindowsDirectoryA
GetLastError
GetModuleFileNameA
LoadLibraryExA
GlobalMemoryStatus
ExpandEnvironmentStringsA
lstrcatA
GetStartupInfoA
SetErrorMode
GetVersionExA
GetModuleHandleA
GetCommandLineA
LocalFree
lstrcpynA
LocalAlloc
IsDBCSLeadByte
CloseHandle
WriteFile
CreateFileA
SetCurrentDirectoryA
SetFilePointer
lstrcmpA
ReadFile
GetFileSize
GetPrivateProfileStringA
FindFirstFileA
FindClose
lstrlenA
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
ExitProcess

user32

wsprintfA
MessageBoxA
CharNextA
LoadStringA
CharPrevA
CharUpperA
CharLowerA

shell32

SHFileOperationA
SHChangeNotify
ord179

ole32

OleUninitialize
CoCreateInstance
OleInitialize

advpack

RunSetupCommand
ExecuteCab
RegRestoreAll
DelNode
GetVersionFromFile

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

747d1b3651f3a670f3535d8cc0c73833

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

shell32

ole32

advpack

version

Sections

.text Size: 23KB - Virtual size: 23KB

.data Size: 1024B - Virtual size: 588B

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 23KB - Virtual size: 23KB

.data
Size: 1024B - Virtual size: 588B

.rsrc
Size: 2KB - Virtual size: 1KB