e60e6593c77d0d00b3a0de45ff5de6c7189a772ce1c65812f5a0a86025623fd4

Sharing

Copy URL Twitter E-mail

General

Target

e60e6593c77d0d00b3a0de45ff5de6c7189a772ce1c65812f5a0a86025623fd4
Size

735KB
MD5

3e40df3ea9a229d3b4419dec3bb47646
SHA1

8022c3794a9cf852ba819a395e77f1da88f597b4
SHA256

e60e6593c77d0d00b3a0de45ff5de6c7189a772ce1c65812f5a0a86025623fd4
SHA512

32708215d73d28f4bf1006bb1e401e302aab505792fc6a0c7cab2320d3927e9bc26cd07bdaab97e815431e54d9c1ad1ecfc1b5b3207b68af7ce53951fe80a9a9
SSDEEP

12288:w6lWkUomNwk325wLSguKtWPM+3EKF46GM88yg5TBrYdEvcVRLX2wi:xWkU3Nwk325QStKsU+UKF9Gu951YdaeO

Score

N/A

Malware Config

Signatures

Files

e60e6593c77d0d00b3a0de45ff5de6c7189a772ce1c65812f5a0a86025623fd4
.exe windows x86

5559ce0f3ee02b64d7f99f0ae70f322d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

PulseEvent
GetStringTypeW
ResetEvent
WritePrivateProfileStructW
WaitCommEvent
SetConsoleCursorInfo
GetSystemInfo
FindNextVolumeW
TerminateThread
InitializeCriticalSectionAndSpinCount
GetStringTypeExW
MultiByteToWideChar
SetEvent
SetConsoleMaximumWindowSize
GetPrivateProfileStringW
VirtualAlloc
GlobalFree
RegisterWaitForInputIdle
GetProfileStringW
ContinueDebugEvent

query

LocateCatalogsW

advapi32

WmiOpenBlock
CreateProcessWithLogonW
LsaOpenTrustedDomainByName
SetSecurityDescriptorControl
GetOldestEventLogRecord
EnumDependentServicesA
LookupPrivilegeValueW
GetTraceEnableLevel
LsaStorePrivateData
LsaCreateTrustedDomainEx
RegNotifyChangeKeyValue
RegisterEventSourceA
TraceEvent
CreatePrivateObjectSecurityEx
FreeSid

Sections

.itext
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 91KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 131KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 109KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 255KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5559ce0f3ee02b64d7f99f0ae70f322d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

query

advapi32

Sections

.itext Size: 7KB - Virtual size: 6KB

.itext Size: 5KB - Virtual size: 4KB

.itext Size: 5KB - Virtual size: 5KB

.itext Size: 6KB - Virtual size: 6KB

.text Size: 24KB - Virtual size: 24KB

.itext Size: 91KB - Virtual size: 137KB

.data Size: 131KB - Virtual size: 279KB

.bss Size: 109KB - Virtual size: 229KB

.idata Size: 255KB - Virtual size: 340KB

.rsrc Size: 98KB - Virtual size: 97KB

.reloc Size: 512B - Virtual size: 240B

.itext
Size: 7KB - Virtual size: 6KB

.itext
Size: 5KB - Virtual size: 4KB

.itext
Size: 5KB - Virtual size: 5KB

.itext
Size: 6KB - Virtual size: 6KB

.text
Size: 24KB - Virtual size: 24KB

.itext
Size: 91KB - Virtual size: 137KB

.data
Size: 131KB - Virtual size: 279KB

.bss
Size: 109KB - Virtual size: 229KB

.idata
Size: 255KB - Virtual size: 340KB

.rsrc
Size: 98KB - Virtual size: 97KB

.reloc
Size: 512B - Virtual size: 240B