161d9a20cab150257362a46972ff06bb8fc5c7f197ce08f3805fe96b711c9e91

General

Target

161d9a20cab150257362a46972ff06bb8fc5c7f197ce08f3805fe96b711c9e91
Size

206KB
MD5

12a41c08a4f4695227e1437132df2a47
SHA1

ee70408358e898d3eedef55f4af16b9790923763
SHA256

161d9a20cab150257362a46972ff06bb8fc5c7f197ce08f3805fe96b711c9e91
SHA512

498a3a193aa98593585f5e4a50ede308a7f21a590e8f439fdc1d0c39e361b096fc94418d4e62ff43b06f5851ddf7e01ce54ee084cf7f8870675991fabd9be517
SSDEEP

6144:27o9z+HMtpTdMj2DGqsIKwo08a2XrhbwP5n14F:20z+wDdDtsVD0gr1wUF

Score

N/A

Malware Config

Signatures

Files

161d9a20cab150257362a46972ff06bb8fc5c7f197ce08f3805fe96b711c9e91
.exe windows x86

b5fc9552c291fa6cdf5d922c56555d57

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetTickCount
FindResourceA
GetLocaleInfoW
lstrlenA
GetOEMCP
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcess
CreateFileA
GetVolumeInformationA
SetUnhandledExceptionFilter
lstrcpyA
CloseHandle
SetLastError
LockResource
HeapAlloc
SystemTimeToFileTime
GetCurrentProcessId
QueryPerformanceCounter
WideCharToMultiByte
lstrcmpA
GetProcessHeap
GetLocalTime
MultiByteToWideChar
QueryDosDeviceA

scecli

SceAppendSecurityProfileInfo
SceCloseProfile
SceAddToObjectList
SceBrowseDatabaseTable
SceAnalyzeSystem
SceAddToNameStatusList

advapi32

RegOpenKeyExA
RegQueryValueExW
RegCloseKey
RegQueryValueExA

secur32

FreeCredentialsHandle
EnumerateSecurityPackagesW
GetComputerObjectNameA
ExportSecurityContext
FreeContextBuffer

schannel

InitializeSecurityContextW
QuerySecurityPackageInfoA
QueryContextAttributesW
MakeSignature
QueryContextAttributesA
QuerySecurityPackageInfoW

Sections

.text
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b5fc9552c291fa6cdf5d922c56555d57

Headers

File Characteristics

Imports

kernel32

scecli

advapi32

secur32

schannel

Sections

.text Size: 134KB - Virtual size: 134KB

.rdata Size: 55KB - Virtual size: 54KB

.data Size: 12KB - Virtual size: 2.3MB

.rcrc Size: 2KB - Virtual size: 2KB

.text
Size: 134KB - Virtual size: 134KB

.rdata
Size: 55KB - Virtual size: 54KB

.data
Size: 12KB - Virtual size: 2.3MB

.rcrc
Size: 2KB - Virtual size: 2KB