f8942370b7e9b412288851dc4d84ae55aa01f4c747dae15303c50b021c95e3ef

General

Target

f8942370b7e9b412288851dc4d84ae55aa01f4c747dae15303c50b021c95e3ef
Size

840KB
MD5

45ac211ef3bb5ad3e4ba335882d953a2
SHA1

0db84e63af434de34a14084003ef33f74751c2a5
SHA256

f8942370b7e9b412288851dc4d84ae55aa01f4c747dae15303c50b021c95e3ef
SHA512

8e06584bd1472f5280f0f353d4b5983168aff117f6f4249a988a926015b0f635ad3b574808a8063972c42f64cb6a525c377c8719e91c63d4c4ce25224a80d91d
SSDEEP

24576:exjpgwSRjg8D2J5yUc7tYQom6SmzcpwCJ0sgqFp7sB:yyg8D2TyUItnomdmzGw40sgmuB

Score

N/A

Malware Config

Signatures

Files

f8942370b7e9b412288851dc4d84ae55aa01f4c747dae15303c50b021c95e3ef
.exe windows x86

df2e663cd6f3899408d79b3e4264d5a0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW

kernel32

LocalFree
lstrcmpiW
GetCommandLineW
HeapAlloc
GetProcessHeap
HeapFree
WideCharToMultiByte
MultiByteToWideChar
ReadFile
WriteFile
CloseHandle
SetFilePointer
CreateFileW
SetFileAttributesW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetProcAddress
LoadLibraryExW
ExpandEnvironmentStringsW
lstrlenW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
RemoveDirectoryW
DeleteFileW
CreateDirectoryW
GetTickCount
FindClose
FindNextFileW
FindFirstFileW
GetModuleFileNameW
MoveFileExW
GetLastError
EnumResourceNamesW
GetTempPathW
FindFirstFileExW
SetProcessWorkingSetSize
GetCurrentProcess
ExitProcess
GetModuleHandleW
FindResourceW
SizeofResource
LockResource
LoadResource

shell32

CommandLineToArgvW

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 637KB - Virtual size: 637KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 192KB - Virtual size: 1.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

df2e663cd6f3899408d79b3e4264d5a0

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

shell32

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: - Virtual size: 16B

.rsrc Size: 637KB - Virtual size: 637KB

.vmp0 Size: 192KB - Virtual size: 1.3MB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: - Virtual size: 16B

.rsrc
Size: 637KB - Virtual size: 637KB

.vmp0
Size: 192KB - Virtual size: 1.3MB