42293770bb4c97f9afccffa1b97702441b13259f83fe45f240849c2d2b508595

Sharing

Copy URL Twitter E-mail

General

Target

42293770bb4c97f9afccffa1b97702441b13259f83fe45f240849c2d2b508595
Size

164KB
MD5

ee8f02e6270175a8fec5695c0e2be61f
SHA1

442852185f650db273f3006d12cc20089273ea9f
SHA256

42293770bb4c97f9afccffa1b97702441b13259f83fe45f240849c2d2b508595
SHA512

54bb06c6891c14b8f1064313092c5f0e96b0907af6a1d5c0c30453553e4aed148f0b4d52583e03bd275a156c7c77c4e83e334e242e9f323027a82dffad9e85cd
SSDEEP

3072:ypT7UggzBKnL4fP4XMV0Kna+E9s/K7QpUOW45bL2e:y3iPMlts7UZ45b6e

Score

N/A

Malware Config

Signatures

Files

42293770bb4c97f9afccffa1b97702441b13259f83fe45f240849c2d2b508595
.exe windows x86

35e6cd060345455d4d079008b86c70bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegConnectRegistryW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegFlushKey
RegLoadKeyW
RegQueryInfoKeyW
RegReplaceKeyW
RegRestoreKeyW
RegSaveKeyW
RegSetValueExW
RegUnLoadKeyW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

CreateFileA
VirtualAlloc
CloseHandle
CreateThread
GetOEMCP
SetCriticalSectionSpinCount
CreateMutexA
FoldStringW
ExitThread
SetCommConfig
OpenFileMappingW
FreeLibrary
GetModuleHandleW
LocalAlloc
LocalFree
TlsGetValue
TlsSetValue
GetLastError
LoadLibraryA
RaiseException
GetProcAddress
BeginUpdateResourceW
CompareStringW
CreateDirectoryW
CreateEventW
CreateFileW
Sleep
HeapReAlloc
HeapAlloc
RtlUnwind
GetCommandLineA
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapCreate
VirtualFree
HeapFree
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
IsValidCodePage
HeapSize
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle

Sections

.text
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

35e6cd060345455d4d079008b86c70bf

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

version

kernel32

Sections

.text Size: 83KB - Virtual size: 82KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 5KB - Virtual size: 28KB

.rsrc Size: 58KB - Virtual size: 57KB

.text
Size: 83KB - Virtual size: 82KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 5KB - Virtual size: 28KB

.rsrc
Size: 58KB - Virtual size: 57KB