d5f01a5fc463c362050a0ced10b7d28232a084ea743d9a5436ed93d877a8dc82

General

Target

d5f01a5fc463c362050a0ced10b7d28232a084ea743d9a5436ed93d877a8dc82
Size

52KB
MD5

bd15861d01a948ed0597d5f4ed57a828
SHA1

4fb9817f6beafc27aeba0b9d0918ba1bea534faf
SHA256

d5f01a5fc463c362050a0ced10b7d28232a084ea743d9a5436ed93d877a8dc82
SHA512

05518d42568e4cc5fb812038b2d188b0640856c57737aedcc99be045dafbe2ea201f8faa9d7ac678268ee64fcdd798c0717c4e0b9a140aac5ef170a486151364
SSDEEP

768:np6VnTyUku/+ShFwbT0Siky3kI7vvaBnQZ9i4AquQQLXztJteo3lmg:klt/9FwbTXixfE6983lm

Score

N/A

Malware Config

Signatures

Files

d5f01a5fc463c362050a0ced10b7d28232a084ea743d9a5436ed93d877a8dc82
.exe windows x86

a93dd46d48805b0febbbc6d99ea01e9f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

EnumProcessModules
GetModuleBaseNameA

kernel32

DuplicateHandle
Sleep
CreateThread
InterlockedDecrement
GetCurrentThread
GetLastError
VirtualProtectEx
WriteProcessMemory
OpenProcess
CloseHandle
GetLocaleInfoA
VirtualProtect
GetCurrentProcess
GetCurrentProcessId
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
LocalFree
ExitProcess
RtlUnwind
GetModuleHandleA
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
RaiseException
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
SetFilePointer
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
TerminateProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InterlockedExchange
VirtualQuery
HeapSize
SetUnhandledExceptionFilter
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
FlushFileBuffers
GetSystemInfo

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
SetThreadToken
DuplicateTokenEx
CreateProcessAsUserA
OpenThreadToken
LookupAccountSidA
GetTokenInformation
RegDeleteKeyA

ole32

CoCreateInstance
CoInitialize

oleaut32

SysFreeString
SysAllocString
VariantClear

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a93dd46d48805b0febbbc6d99ea01e9f

Headers

File Characteristics

Imports

psapi

kernel32

advapi32

ole32

oleaut32

Sections

.text Size: 36KB - Virtual size: 33KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 8KB

.text
Size: 36KB - Virtual size: 33KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 8KB