aa4190e614ea60a5e72d11b7b9f91fc079d538b9a9507e1cb1f17839f024e8f1

Sharing

Copy URL Twitter E-mail

General

Target

aa4190e614ea60a5e72d11b7b9f91fc079d538b9a9507e1cb1f17839f024e8f1
Size

635KB
MD5

362ca633d2d45aed33c3037c90684f00
SHA1

f442ae77281ff624b89d345110c358d4324fba12
SHA256

aa4190e614ea60a5e72d11b7b9f91fc079d538b9a9507e1cb1f17839f024e8f1
SHA512

ec479c8a32caa8e0b276f80eaae660f5c7979045fee518e305f7edfaffcf156cdc94dc6391aed81ec2c3b919df2346d99ac8796287e230c4a91b8f9c4b093dd9
SSDEEP

12288:bsYTI+jQJdw51leC9DnDSJ3oIjQ9l7x3xDntNZJdo8NroJ:1TINdGleu6Jx0p3xDntNZJdoiroJ

Score

N/A

Malware Config

Signatures

Files

aa4190e614ea60a5e72d11b7b9f91fc079d538b9a9507e1cb1f17839f024e8f1
.exe windows x86

7946c02ff527d382a13303994ec8e59e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetTokenInformation
OpenProcessToken
RegOpenKeyExW

kernel32

GetProcAddress
SizeofResource
lstrlenW
FindResourceExW
FindResourceW
GetCommandLineW
CloseHandle
FreeLibrary
GetModuleFileNameW
RaiseException
LoadResource
GetModuleHandleW
LockResource
GetFileAttributesExW
VerifyVersionInfoW
LoadLibraryExW
VerSetConditionMask
GetLastError
GetCurrentProcess
SetLastError
LocalAlloc
SetStdHandle
SetFilePointer
InterlockedExchange
LoadLibraryA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
WideCharToMultiByte
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
RtlUnwind
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA

ole32

CoCreateGuid

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text/DE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 508KB - Virtual size: 1.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7946c02ff527d382a13303994ec8e59e

Headers

File Characteristics

Imports

advapi32

kernel32

ole32

Sections

.text Size: 52KB - Virtual size: 51KB

.data Size: 4KB - Virtual size: 11KB

.text/DE Size: 12KB - Virtual size: 12KB

.rsrc Size: 57KB - Virtual size: 56KB

.vmp0 Size: 508KB - Virtual size: 1.6MB

.text
Size: 52KB - Virtual size: 51KB

.data
Size: 4KB - Virtual size: 11KB

.text/DE
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 57KB - Virtual size: 56KB

.vmp0
Size: 508KB - Virtual size: 1.6MB