088764928210751f6f8a6917deb2e31d04b17e8e8d393faef522a98d45f2cfbf

General

Target

088764928210751f6f8a6917deb2e31d04b17e8e8d393faef522a98d45f2cfbf
Size

206KB
MD5

109d540e2446b5c448de346e41709be7
SHA1

9aaebee21d6c490a95a6419eb40c51f4a4b79f92
SHA256

088764928210751f6f8a6917deb2e31d04b17e8e8d393faef522a98d45f2cfbf
SHA512

fc83f718bfeca6ec2a471b8debbf2213df09cd20550ef7c6275ed37ee4f78ab329d93a76fee15bd7b12792a7c127314b832e9b39d33084ac0d39f299d348f839
SSDEEP

6144:27o9z+HMtpTdMj2DGqsIKwo08a2XrhbwP5n14aU:20z+wDdDtsVD0gr1wUt

Score

N/A

Malware Config

Signatures

Files

088764928210751f6f8a6917deb2e31d04b17e8e8d393faef522a98d45f2cfbf
.exe windows x86

b5fc9552c291fa6cdf5d922c56555d57

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetTickCount
FindResourceA
GetLocaleInfoW
lstrlenA
GetOEMCP
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcess
CreateFileA
GetVolumeInformationA
SetUnhandledExceptionFilter
lstrcpyA
CloseHandle
SetLastError
LockResource
HeapAlloc
SystemTimeToFileTime
GetCurrentProcessId
QueryPerformanceCounter
WideCharToMultiByte
lstrcmpA
GetProcessHeap
GetLocalTime
MultiByteToWideChar
QueryDosDeviceA

scecli

SceAppendSecurityProfileInfo
SceCloseProfile
SceAddToObjectList
SceBrowseDatabaseTable
SceAnalyzeSystem
SceAddToNameStatusList

advapi32

RegOpenKeyExA
RegQueryValueExW
RegCloseKey
RegQueryValueExA

secur32

FreeCredentialsHandle
EnumerateSecurityPackagesW
GetComputerObjectNameA
ExportSecurityContext
FreeContextBuffer

schannel

InitializeSecurityContextW
QuerySecurityPackageInfoA
QueryContextAttributesW
MakeSignature
QueryContextAttributesA
QuerySecurityPackageInfoW

Sections

.text
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b5fc9552c291fa6cdf5d922c56555d57

Headers

File Characteristics

Imports

kernel32

scecli

advapi32

secur32

schannel

Sections

.text Size: 134KB - Virtual size: 134KB

.rdata Size: 55KB - Virtual size: 54KB

.data Size: 12KB - Virtual size: 2.3MB

.rcrc Size: 2KB - Virtual size: 2KB

.text
Size: 134KB - Virtual size: 134KB

.rdata
Size: 55KB - Virtual size: 54KB

.data
Size: 12KB - Virtual size: 2.3MB

.rcrc
Size: 2KB - Virtual size: 2KB