04a86c80933a4357b328e07e01d60d98e817675c7894bb2ab81543aba9ed12ec

Sharing

Copy URL Twitter E-mail

General

Target

04a86c80933a4357b328e07e01d60d98e817675c7894bb2ab81543aba9ed12ec
Size

392KB
MD5

f7e9d26ec21f28b2df54296825f55430
SHA1

3fcaa9d0d1a965ad9667ac951164b7bdc07085cc
SHA256

04a86c80933a4357b328e07e01d60d98e817675c7894bb2ab81543aba9ed12ec
SHA512

f1c6b76014e9781fd3cf44a83d4cb6c98f28584f473e0170a3bb05876c546515f3562c943d9af54d044acc8660aa62e9d241586b90a677414152d0788d08ef3c
SSDEEP

6144:HXknbOeYIDUfdRWwNEBJNM6BCPhrHnGvZg+Ob37t7cUCAk9u:H0aeYMWd9EzNM6ctngGZ7hcrAk9u

Score

N/A

Malware Config

Signatures

Files

04a86c80933a4357b328e07e01d60d98e817675c7894bb2ab81543aba9ed12ec
.dll windows x86

8a2258539457529b21f1e7553205623a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
ReadEncryptedFileRaw

kernel32

lstrlenW
InterlockedCompareExchange
GetCurrentThreadId
GetModuleFileNameW
GetDateFormatA
GlobalAlloc
GetModuleHandleA
LocalAlloc
LeaveCriticalSection
ReadFile
CreateEventW
GetVersionExA
DeleteCriticalSection
GetCurrentProcessId
WideCharToMultiByte
SetEvent
InterlockedExchange
GetTickCount
GetThreadLocale
SetUnhandledExceptionFilter
InterlockedIncrement
CreateMutexW
GetLastError
TerminateProcess
UnhandledExceptionFilter
EnterCriticalSection
CloseHandle
FreeLibrary
DeviceIoControl
LocalFree
lstrcmpiW
WaitForSingleObject
CreateFileW
Sleep
RaiseException
MultiByteToWideChar
VirtualAlloc
QueryPerformanceCounter
LoadResource
InitializeCriticalSection
GlobalFree
GetModuleHandleW
InterlockedDecrement
GetSystemTimeAsFileTime

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx
CoTaskMemAlloc
CoInitialize
CoTaskMemRealloc

oleaut32

VarUI4FromStr
SysFreeString
UnRegisterTypeLi
SysStringLen
RegisterTypeLi
LoadTypeLi
SysAllocString

shell32

ShellExecuteW

Exports

Exports

Addr2Line
GetItemString
Module_GetDict
UserWarning
set_strip_error_numbers

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8a2258539457529b21f1e7553205623a

Headers

File Characteristics

Imports

advapi32

kernel32

ole32

oleaut32

shell32

Exports

Exports

Sections

.text Size: 188KB - Virtual size: 187KB

.rdata Size: 80KB - Virtual size: 77KB

.data Size: 52KB - Virtual size: 52KB

.rsrc Size: 56KB - Virtual size: 55KB

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 188KB - Virtual size: 187KB

.rdata
Size: 80KB - Virtual size: 77KB

.data
Size: 52KB - Virtual size: 52KB

.rsrc
Size: 56KB - Virtual size: 55KB

.reloc
Size: 12KB - Virtual size: 10KB