750874b6be7e2458c3ca2b52951157a7f6534b504f121ea7f68ba784fa725e82

Sharing

Copy URL

Twitter E-mail

General

Target

750874b6be7e2458c3ca2b52951157a7f6534b504f121ea7f68ba784fa725e82
Size

7.5MB
MD5

791b39eb6e7aa35014a4a9135f4ada61
SHA1

160499a48897c96b6d3935d80707690f119a8259
SHA256

750874b6be7e2458c3ca2b52951157a7f6534b504f121ea7f68ba784fa725e82
SHA512

a204d3790c0ec2edb16330719560c7e2038cb95868dde1ceeaf59ba2cfd65aadbc3e47977df316c04be9da84302a23b72e301eb8e7a0f84c4705982a14d38bc2
SSDEEP

98304:g+ICIJkvm7ddwCPK//bldxkRVZ9rE7HvfP1CXzHdAiOU/nv9sxrg6KKE9+XBmamL:gXCIyOdOCylzfb9c6iOEls59BX0yM/

Score

N/A

Malware Config

Signatures

Files

750874b6be7e2458c3ca2b52951157a7f6534b504f121ea7f68ba784fa725e82
.exe windows x86

44ea6875b98f0ef1268acc3007ee4c40

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW

advapi32

GetUserNameW
RegCreateKeyExW
RegSetValueExW
RegCloseKey

kernel32

lstrcpyW
lstrlenW
CreateProcessW
GetLastError
WaitForSingleObject
CloseHandle
Sleep
GetModuleFileNameW
lstrcatW
ExitProcess
CreateToolhelp32Snapshot
Process32FirstW
lstrcmpiW
lstrcmpA
Process32NextW
GetModuleHandleW
GetWindowsDirectoryW
CreateDirectoryW
CreateFileW
WriteFile
GetComputerNameW
GetFileSize
ReadFile
GetTempPathW
SetFilePointer
GetCommandLineW
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
HeapAlloc
RaiseException
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

44ea6875b98f0ef1268acc3007ee4c40

Headers

DLL Characteristics

File Characteristics

Imports

user32

advapi32

kernel32

Sections

.text Size: 40KB - Virtual size: 40KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 43KB - Virtual size: 42KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 40KB - Virtual size: 40KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 43KB - Virtual size: 42KB

.reloc
Size: 6KB - Virtual size: 5KB