d15d1ececd500d104a8abdde80a599c05b28862f6552e37e6591030e612abce4

Sharing

Copy URL Twitter E-mail

General

Target

d15d1ececd500d104a8abdde80a599c05b28862f6552e37e6591030e612abce4
Size

160KB
MD5

bc941836bc3cd1bb9754923c3db5f33b
SHA1

83476badfeb953e42d3e28210adc06d85d7d9019
SHA256

d15d1ececd500d104a8abdde80a599c05b28862f6552e37e6591030e612abce4
SHA512

595a307e62923633c571cb4ff0d05454144999d24d6b44cbc130166c852da8c5372f293c3b4d787e03c008a28b666b63c3bf71afd805f46e112ad0315c4324c8
SSDEEP

3072:6mgRNWdOOkD5X4XMKA0KnP+yg6hilFKWkwR12dSSYS:zA5XMHd8hiljkPSpS

Score

N/A

Malware Config

Signatures

Files

d15d1ececd500d104a8abdde80a599c05b28862f6552e37e6591030e612abce4
.exe windows x86

e70d79f7bc3b38d27ebb7aa08f02c8c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegConnectRegistryW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegFlushKey
RegLoadKeyW
RegQueryInfoKeyW
RegReplaceKeyW
RegRestoreKeyW
RegSaveKeyW
RegSetValueExW
RegUnLoadKeyW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

CreateFileA
VirtualAlloc
CloseHandle
CreateThread
CreateMutexW
GetProfileIntA
CreateProcessA
BuildCommDCBA
MoveFileWithProgressW
BackupRead
SetProcessWorkingSetSize
GetNamedPipeInfo
FreeLibrary
GetModuleHandleW
LocalAlloc
LocalFree
TlsGetValue
TlsSetValue
GetLastError
LoadLibraryA
RaiseException
GetProcAddress
BeginUpdateResourceW
CompareStringW
CreateDirectoryW
CreateEventW
CreateFileW
Sleep
HeapReAlloc
HeapAlloc
RtlUnwind
GetCommandLineA
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapCreate
VirtualFree
HeapFree
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 72.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e70d79f7bc3b38d27ebb7aa08f02c8c5

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

version

kernel32

Sections

.text Size: 81KB - Virtual size: 81KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 5KB - Virtual size: 72.5MB

.rsrc Size: 54KB - Virtual size: 54KB

.text
Size: 81KB - Virtual size: 81KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 5KB - Virtual size: 72.5MB

.rsrc
Size: 54KB - Virtual size: 54KB