855d7006e81e60a2cfa4b85610077f8d0516f7f05fcab80e56b742796b00a36c

Sharing

Copy URL

Twitter E-mail

General

Target

855d7006e81e60a2cfa4b85610077f8d0516f7f05fcab80e56b742796b00a36c
Size

142KB
MD5

5107fcbe8ddf864215d19156c9e5f033
SHA1

a19dad22ebddc5331e81375476b8bf35b420b909
SHA256

855d7006e81e60a2cfa4b85610077f8d0516f7f05fcab80e56b742796b00a36c
SHA512

25dab42aae01b4b490493d2e70efb469cd03a881667305d293b02e41a20b4977173ab53f52320746885aa06efa64655e90ac371781eaaf6dbc2f891663ebcc3e
SSDEEP

3072:TEKkZmy36rmOiyMO+3hKRY2fbU2SEi/neBZBp4DqSd49hO:TEKAPKrmJywhKy2fb8EknFDO

Score

N/A

Malware Config

Signatures

Files

855d7006e81e60a2cfa4b85610077f8d0516f7f05fcab80e56b742796b00a36c
.exe windows x86

22cb0e150fb6f9c9950b5701e91d7911

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetStartupInfoA
WriteFile
GetProcAddress

user32

LoadIconA

gdi32

GetStockObject

advapi32

RegCreateKeyExW
SetFileSecurityW
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExW
GetFileSecurityW
GetUserNameA
RegCloseKey
RegCreateKeyExA
RegEnumKeyA
RegEnumValueA
RegEnumValueW
RegOpenKeyExA

msvcrt

_CIpow
_XcptFilter
__CxxFrameHandler
__dllonexit
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
_adjust_fdiv
_beginthreadex
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_ftol
_initterm
_onexit
_purecall
_snwprintf
_stricmp
_strnicmp
_ultow
_vsnprintf
_vsnwprintf
_wcmdln
_wcsicmp
_wcsnicmp
_wcsupr
_wtoi
_wtoi64
_wtol
abs
atoi
atol
bsearch
ceil
exit
floor
free
isdigit
isspace
iswalnum
iswascii
iswcntrl
iswdigit
iswspace
isxdigit
malloc
memcmp
memcpy
memmove
memset
qsort
rand
realloc
srand
strchr
strncpy
swprintf
swscanf
toupper
towlower
towupper
wcscat
wcschr
wcscmp
wcscpy
wcscspn
wcslen
wcsncmp
wcsncpy
wcspbrk
wcsrchr
wcsspn
wcsstr
wcstombs
wcstoul

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.444449
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.444448
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.444447
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.444446
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.444445
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.444444
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.444443
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.444442
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.441441
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.444441
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.344442
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.344441
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.443441
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.442441
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.341441
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

22cb0e150fb6f9c9950b5701e91d7911

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1KB - Virtual size: 1KB

.444449 Size: 512B - Virtual size: 100B

.444448 Size: 512B - Virtual size: 100B

.444447 Size: 512B - Virtual size: 100B

.444446 Size: 512B - Virtual size: 100B

.444445 Size: 512B - Virtual size: 100B

.444444 Size: 512B - Virtual size: 100B

.444443 Size: 512B - Virtual size: 100B

.444442 Size: 512B - Virtual size: 100B

.441441 Size: 512B - Virtual size: 200B

.444441 Size: 512B - Virtual size: 100B

.344442 Size: 512B - Virtual size: 100B

.344441 Size: 512B - Virtual size: 100B

.443441 Size: 87KB - Virtual size: 87KB

.442441 Size: 512B - Virtual size: 100B

.341441 Size: 512B - Virtual size: 100B

.rsrc Size: 25KB - Virtual size: 24KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 1KB

.444449
Size: 512B - Virtual size: 100B

.444448
Size: 512B - Virtual size: 100B

.444447
Size: 512B - Virtual size: 100B

.444446
Size: 512B - Virtual size: 100B

.444445
Size: 512B - Virtual size: 100B

.444444
Size: 512B - Virtual size: 100B

.444443
Size: 512B - Virtual size: 100B

.444442
Size: 512B - Virtual size: 100B

.441441
Size: 512B - Virtual size: 200B

.444441
Size: 512B - Virtual size: 100B

.344442
Size: 512B - Virtual size: 100B

.344441
Size: 512B - Virtual size: 100B

.443441
Size: 87KB - Virtual size: 87KB

.442441
Size: 512B - Virtual size: 100B

.341441
Size: 512B - Virtual size: 100B

.rsrc
Size: 25KB - Virtual size: 24KB

.reloc
Size: 1KB - Virtual size: 1KB