63ecbd92b71aeb07d8e24deb7142f4750d4977d3bc1589070ad59f91092f4af5

General

Target

63ecbd92b71aeb07d8e24deb7142f4750d4977d3bc1589070ad59f91092f4af5
Size

134KB
MD5

19d8ee086d2c6a3bbd45b6b230b650cf
SHA1

195d8bcee23918748ca2bc8571d9cc7241ceaf0d
SHA256

63ecbd92b71aeb07d8e24deb7142f4750d4977d3bc1589070ad59f91092f4af5
SHA512

0a091fe0a1975df829e4bd6408f948e1c7d5e96d1949750b66f733a335ab3a1e64235e6f712a8572dd00cbe993a1c931e640cc0553c24d840d79d111c9e16d60
SSDEEP

3072:v8jAMlTyis1QnC3dYirBcmnhh/03+3T6ckX:v8jAI+fQC3dYGR103G

Score

N/A

Malware Config

Signatures

Files

63ecbd92b71aeb07d8e24deb7142f4750d4977d3bc1589070ad59f91092f4af5
.exe windows x86

a9e0d15f8c6171e45c5dc5fb4dea91ba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
SetErrorMode
GetStartupInfoA
VirtualAlloc
GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
GetModuleHandleA
TerminateProcess

oleaut32

SysAllocStringByteLen
GetActiveObject
SysFreeString
VariantClear
SafeArrayGetUBound
SafeArrayCreate

msvcrt

_assert
__getmainargs
_controlfp
_cabs
_beep
_chdir
__p__commode
_XcptFilter
_exit
_access
__setusermatherr
_except_handler3
__p__fmode
_initterm
_c_exit
exit
__set_app_type
_atoldbl
_acmdln
_atoi64
_adjust_fdiv

advapi32

RegQueryValueExW
WmiReceiveNotificationsA
RegOpenKeyExA
WmiSetSingleItemW
RegQueryValueExA
RegCloseKey
RegOpenKeyExW

Sections

.textbss
Size: - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9e0d15f8c6171e45c5dc5fb4dea91ba

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

oleaut32

msvcrt

advapi32

Sections

.textbss Size: - Virtual size: 188KB

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 112KB - Virtual size: 111KB

.rsrc Size: 5KB - Virtual size: 5KB

.textbss
Size: - Virtual size: 188KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 112KB - Virtual size: 111KB

.rsrc
Size: 5KB - Virtual size: 5KB