0f67a2e3e9f4fabd558d13b4ac815c803bdea416621ec8f91e15a070f5a55a1f

General

Target

0f67a2e3e9f4fabd558d13b4ac815c803bdea416621ec8f91e15a070f5a55a1f
Size

212KB
MD5

09a6e39aa08a168071c6b7547d110bc3
SHA1

88d6fef0637dc6232bbfb3e69b1c3d2bf8eca79b
SHA256

0f67a2e3e9f4fabd558d13b4ac815c803bdea416621ec8f91e15a070f5a55a1f
SHA512

72d865902610f5c9f57c22e73a61c9347760d3f76c5bcd04dcb7e5f6856fc0378dea0a378c576b3293fb9ad1b67f7150428ecb9d68f53ecea6f8062f9b38641b
SSDEEP

3072:6QbWZnoxW9XW0QLrHVMfXzYpFvcIkNCg+TeL3QAS9r6jgrPGyGofwnioGVcDLomC:eCWIDdT1s4eo9riAuyx9Ex7m0LsB

Score

N/A

Malware Config

Signatures

Files

0f67a2e3e9f4fabd558d13b4ac815c803bdea416621ec8f91e15a070f5a55a1f
.exe windows x86

c223343a7bfc4367b70363d0a4f8fc9c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
GetLocaleInfoW
LockResource
CloseHandle
HeapFree
GetOEMCP
HeapAlloc
GetSystemTimeAsFileTime
LoadLibraryW
FindResourceA
QueryDosDeviceA
GetTickCount
MultiByteToWideChar
GetCurrentProcess
GetLocalTime
GetProcessHeap
GetCurrentProcessId
WideCharToMultiByte
CreateFileA
lstrcmpA
GetVolumeInformationA
SetLastError
lstrlenA
SystemTimeToFileTime
lstrcpyA
QueryPerformanceCounter

schannel

MakeSignature
InitializeSecurityContextW
QueryContextAttributesW
QuerySecurityPackageInfoW
QueryContextAttributesA
QuerySecurityPackageInfoA

secur32

GetComputerObjectNameA
FreeCredentialsHandle
ExportSecurityContext
EnumerateSecurityPackagesW
FreeContextBuffer

scecli

SceAddToNameStatusList
SceAppendSecurityProfileInfo
SceAddToObjectList
SceCloseProfile
SceBrowseDatabaseTable
SceAnalyzeSystem

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExW
RegQueryValueExA

Sections

.text
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c223343a7bfc4367b70363d0a4f8fc9c

Headers

File Characteristics

Imports

kernel32

schannel

secur32

scecli

advapi32

Sections

.text Size: 135KB - Virtual size: 134KB

.rdata Size: 55KB - Virtual size: 54KB

.data Size: 17KB - Virtual size: 2.3MB

.rcrc Size: 2KB - Virtual size: 2KB

.text
Size: 135KB - Virtual size: 134KB

.rdata
Size: 55KB - Virtual size: 54KB

.data
Size: 17KB - Virtual size: 2.3MB

.rcrc
Size: 2KB - Virtual size: 2KB