2664f6c6dddfcfc30e6ef7603b72a8ce82420173c93af723db5186a4dcb5f36d

General

Target

2664f6c6dddfcfc30e6ef7603b72a8ce82420173c93af723db5186a4dcb5f36d
Size

37KB
MD5

e5a3d83b86f663403d4b42fa98e6a74d
SHA1

65946baef1eac2296254cc66e5a8597a287118f3
SHA256

2664f6c6dddfcfc30e6ef7603b72a8ce82420173c93af723db5186a4dcb5f36d
SHA512

b8050224a2a6949752b9b3e3d89350fe337c3c88017b1ff4126b2af6e7af768507b97556dc72a40545fb3916a749c64799a41270919a15eb48e61435bdd77e41
SSDEEP

768:ETEji80TFwnD2BGS6O4kIL1Mc4cpyJ5clbYNCV:ET610TaWGqlIL54OyJ5wbS

Score

N/A

Malware Config

Signatures

Files

2664f6c6dddfcfc30e6ef7603b72a8ce82420173c93af723db5186a4dcb5f36d
.exe windows x86

747d1b3651f3a670f3535d8cc0c73833

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegEnumValueA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA

kernel32

GetFileAttributesA
lstrcpyA
MultiByteToWideChar
CopyFileA
SetFileAttributesA
CreateDirectoryA
GetDriveTypeA
lstrcmpiA
GetWindowsDirectoryA
GetLastError
GetModuleFileNameA
LoadLibraryExA
GlobalMemoryStatus
ExpandEnvironmentStringsA
lstrcatA
GetStartupInfoA
SetErrorMode
GetVersionExA
GetModuleHandleA
GetCommandLineA
LocalFree
lstrcpynA
LocalAlloc
IsDBCSLeadByte
CloseHandle
WriteFile
CreateFileA
SetCurrentDirectoryA
SetFilePointer
lstrcmpA
ReadFile
GetFileSize
GetPrivateProfileStringA
FindFirstFileA
FindClose
lstrlenA
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
ExitProcess

user32

wsprintfA
MessageBoxA
CharNextA
LoadStringA
CharPrevA
CharUpperA
CharLowerA

shell32

SHFileOperationA
SHChangeNotify
ord179

ole32

OleUninitialize
CoCreateInstance
OleInitialize

advpack

RunSetupCommand
ExecuteCab
RegRestoreAll
DelNode
GetVersionFromFile

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

747d1b3651f3a670f3535d8cc0c73833

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

shell32

ole32

advpack

version

Sections

.text Size: 23KB - Virtual size: 23KB

.data Size: 1024B - Virtual size: 588B

.rsrc Size: 11KB - Virtual size: 30KB

.text
Size: 23KB - Virtual size: 23KB

.data
Size: 1024B - Virtual size: 588B

.rsrc
Size: 11KB - Virtual size: 30KB