211621fb37f991a1358bd8d08aa95c2f75fbe72acffbddc27eff2674ff0657be

General

Target

211621fb37f991a1358bd8d08aa95c2f75fbe72acffbddc27eff2674ff0657be
Size

206KB
MD5

17626c8197b7e672b6affd7adea5f05b
SHA1

2b11b5d03c038509c4deec03a56c6b7d0024b595
SHA256

211621fb37f991a1358bd8d08aa95c2f75fbe72acffbddc27eff2674ff0657be
SHA512

c0e982392c320a6f33c0103c1bd3541eaaad2e6e4086656aeaba8ae10a0222cc6fe8aac3ea2c81ccb1259d7dd7dfda4522a24d0436ab2f163ebeada04da5e6a7
SSDEEP

6144:27o9z+HMtpTdMj2DGqsIKwo08a2XrhbwP5n14Q:20z+wDdDtsVD0gr1wUQ

Score

N/A

Malware Config

Signatures

Files

211621fb37f991a1358bd8d08aa95c2f75fbe72acffbddc27eff2674ff0657be
.exe windows x86

b5fc9552c291fa6cdf5d922c56555d57

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetTickCount
FindResourceA
GetLocaleInfoW
lstrlenA
GetOEMCP
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcess
CreateFileA
GetVolumeInformationA
SetUnhandledExceptionFilter
lstrcpyA
CloseHandle
SetLastError
LockResource
HeapAlloc
SystemTimeToFileTime
GetCurrentProcessId
QueryPerformanceCounter
WideCharToMultiByte
lstrcmpA
GetProcessHeap
GetLocalTime
MultiByteToWideChar
QueryDosDeviceA

scecli

SceAppendSecurityProfileInfo
SceCloseProfile
SceAddToObjectList
SceBrowseDatabaseTable
SceAnalyzeSystem
SceAddToNameStatusList

advapi32

RegOpenKeyExA
RegQueryValueExW
RegCloseKey
RegQueryValueExA

secur32

FreeCredentialsHandle
EnumerateSecurityPackagesW
GetComputerObjectNameA
ExportSecurityContext
FreeContextBuffer

schannel

InitializeSecurityContextW
QuerySecurityPackageInfoA
QueryContextAttributesW
MakeSignature
QueryContextAttributesA
QuerySecurityPackageInfoW

Sections

.text
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b5fc9552c291fa6cdf5d922c56555d57

Headers

File Characteristics

Imports

kernel32

scecli

advapi32

secur32

schannel

Sections

.text Size: 134KB - Virtual size: 134KB

.rdata Size: 55KB - Virtual size: 54KB

.data Size: 12KB - Virtual size: 2.3MB

.rcrc Size: 2KB - Virtual size: 2KB

.text
Size: 134KB - Virtual size: 134KB

.rdata
Size: 55KB - Virtual size: 54KB

.data
Size: 12KB - Virtual size: 2.3MB

.rcrc
Size: 2KB - Virtual size: 2KB