d2a07bdabf05ecf13e251bb920093852b3acf91818b7cea22db0872f7899642c

General

Target

d2a07bdabf05ecf13e251bb920093852b3acf91818b7cea22db0872f7899642c
Size

52KB
MD5

8e0f777d0a1d52fb5e249d2695eb1ccc
SHA1

a2b4acd51263f42fef635c8c7dd9de5f3e7d9a6a
SHA256

d2a07bdabf05ecf13e251bb920093852b3acf91818b7cea22db0872f7899642c
SHA512

7b5bba96f02eca3a50e9cbab7334c77cfdfb4d4c6f4e14ba5c9d75959076b5d91d234e940eb60d62743a88df28d5d8dfa2ecb06f7a4dd2d6818af7055e5e1a60
SSDEEP

768:1N83352RTIDS1EZkQTRziulT53FuOPZIlZIQyopZ:1y5FyQT1llTZF54Uo

Score

N/A

Malware Config

Signatures

Files

d2a07bdabf05ecf13e251bb920093852b3acf91818b7cea22db0872f7899642c
.dll windows x86

c66e25157fae1431bccbd813adc5d78a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateFileA
lstrcpynA
GetModuleFileNameA
lstrlenA
WinExec
lstrcmpA
ReadFile
GetLastError
GetWindowsDirectoryA
GetProcAddress
GlobalAddAtomA
GlobalFindAtomA
lstrcatA
lstrcpyA
Sleep
OpenFile
TerminateProcess
OpenProcess
DeleteFileA
GetCurrentProcess
GetSystemDirectoryA
GetCurrentProcessId
CreateThread
CompareStringA
CreateToolhelp32Snapshot
Process32First
Module32First
Module32Next
CloseHandle
Process32Next
LoadLibraryA
OutputDebugStringA
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
ExitProcess
HeapReAlloc
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetFilePointer
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers

advapi32

RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c66e25157fae1431bccbd813adc5d78a

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 10KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 10KB

.reloc
Size: 4KB - Virtual size: 3KB