f6057430fc6ed0f4d4aaf84e4aa8a59eef8d75c22c219d294d3378cccf677d91

General

Target

f6057430fc6ed0f4d4aaf84e4aa8a59eef8d75c22c219d294d3378cccf677d91
Size

246KB
MD5

9b64f8eb5e7e2f55f1012976a94abdfd
SHA1

623e5af6ee626a7321a7b77856567aa3d51a81bc
SHA256

f6057430fc6ed0f4d4aaf84e4aa8a59eef8d75c22c219d294d3378cccf677d91
SHA512

1e7ef4c8ce751e027622c7fe0190eb007741785f201f26f3dba9a864e9e9d932e51f59b76ac337b9ebcd006b2d9ea598aa72448e28bba58cc4b17d32f41dcf94
SSDEEP

3072:QK+5EC5/zXEqHpJRyDL7t+n98ACTcsIrvllHphmWbDPvuLQJnTtsx4V4+srfj3TN:G5DXYhw0YHjmWbDHuLA07r86hng

Score

N/A

Malware Config

Signatures

Files

f6057430fc6ed0f4d4aaf84e4aa8a59eef8d75c22c219d294d3378cccf677d91
.exe windows x86

e2dff101d433ef870e21b38c20e96fcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegNotifyChangeKeyValue
CloseEventLog
RegQueryValueA
OpenBackupEventLogA
ReportEventW
ReadEventLogA
RegCreateKeyExA
BackupEventLogW

shlwapi

StrIsIntlEqualW
PathIsUNCW
StrRChrIA
PathBuildRootW
PathUnquoteSpacesW
SHRegDeleteEmptyUSKeyW
SHEnumValueA
StrCSpnIA
PathCompactPathW
PathAppendW
PathIsFileSpecW
PathStripToRootW
StrIsIntlEqualA

kernel32

GetModuleHandleA
VirtualAllocEx
FreeEnvironmentStringsA
GetProcAddress
WriteProfileSectionA
WritePrivateProfileStringA
GetOverlappedResult
InitializeCriticalSection
VirtualFreeEx
GetStringTypeA
HeapSize
HeapWalk
PulseEvent
VerLanguageNameA
MultiByteToWideChar
VirtualProtectEx
GetTimeFormatA
DeleteCriticalSection
GetDateFormatA
LocalFlags
HeapLock
HeapFree
GetStartupInfoA

version

VerQueryValueA
VerFindFileA
GetFileVersionInfoSizeA
VerInstallFileA
GetFileVersionInfoA

netapi32

NetGroupSetUsers
NetGetAnyDCName
NetGetJoinInformation
NetAuditClear
NetConfigSet
NetFileEnum
NetConnectionEnum
NetFileGetInfo
NetAuditRead
NetConfigGet
Netbios
NetGroupGetInfo

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 203KB - Virtual size: 564KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2dff101d433ef870e21b38c20e96fcb

Headers

File Characteristics

Imports

advapi32

shlwapi

kernel32

version

netapi32

msvcrt

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 203KB - Virtual size: 564KB

.rsrc Size: 25KB - Virtual size: 25KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 203KB - Virtual size: 564KB

.rsrc
Size: 25KB - Virtual size: 25KB