4715b4c3c2ea25d3af549d5ba936d22c733b57ac6b5807ff30cce564935fdc12

General

Target

4715b4c3c2ea25d3af549d5ba936d22c733b57ac6b5807ff30cce564935fdc12
Size

76KB
MD5

b26d914e7c24b6e4cdfec9ee1f4ea962
SHA1

5fe7c0c32836f6f3ff7ab8d2f378aea4fd43dde7
SHA256

4715b4c3c2ea25d3af549d5ba936d22c733b57ac6b5807ff30cce564935fdc12
SHA512

02deae3b809c94b1c9f9929b73aa0314c72a795fa3251dfd07a8595585e5f810524d057976ad830b9d9deace6171405fe5e2b705eb30737fbcce9c04e9473150
SSDEEP

768:NMi7zfMbaGyS84NxDGk/4gSI0A3aylhgOhf2Ih8VStbc:WEf0VyS8Mc63xgWRtbc

Score

N/A

Malware Config

Signatures

Files

4715b4c3c2ea25d3af549d5ba936d22c733b57ac6b5807ff30cce564935fdc12
.exe windows x86

bae3fd28966367876d7cd73639328a51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetTokenInformation
CreateProcessAsUserA
DuplicateTokenEx
OpenThreadToken
SetThreadToken
LookupAccountSidA
ImpersonateSelf
GetUserNameA

xolehlp

DtcGetTransactionManagerExA

kernel32

GetStringTypeW
GetProcAddress
LoadLibraryA
CloseHandle
GetEnvironmentVariableA
GetCurrentThread
HeapFree
GetProcessHeap
DuplicateHandle
GetCurrentProcess
OpenProcess
Sleep
QueueUserAPC
GetProcessIdOfThread
OpenThread
MultiByteToWideChar
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
RtlUnwind
RaiseException
TerminateProcess
HeapReAlloc
HeapSize
GetModuleHandleA
GetModuleFileNameA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
GetLastError
FlushFileBuffers
SetFilePointer
SetUnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
IsBadReadPtr
IsBadCodePtr
SetStdHandle
ReadFile
LCMapStringA
LCMapStringW
GetStringTypeA

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bae3fd28966367876d7cd73639328a51

Headers

File Characteristics

Imports

advapi32

xolehlp

kernel32

Sections

.text Size: 44KB - Virtual size: 41KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 16KB - Virtual size: 18KB

.sxdata Size: 4KB - Virtual size: 124B

.text
Size: 44KB - Virtual size: 41KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 16KB - Virtual size: 18KB

.sxdata
Size: 4KB - Virtual size: 124B