80a397fa66c0c9a2a9c2b06bbbbbc1b22366a92a515af649941bc8fc83f2ff34

Sharing

Copy URL Twitter E-mail

General

Target

80a397fa66c0c9a2a9c2b06bbbbbc1b22366a92a515af649941bc8fc83f2ff34
Size

1.4MB
MD5

3a50ae002fdefe27af6b1f117fd73539
SHA1

9d7688eae91682a3a42486285e51d8a1ac5cdfb1
SHA256

80a397fa66c0c9a2a9c2b06bbbbbc1b22366a92a515af649941bc8fc83f2ff34
SHA512

83d6ade0f1555a6304123eab434d9b7d5fef3b05447f4be949376fb0c5cc8ce4fd81c4ab6ff42438ff9b5922e2227da135d1a377b83ceadae79c9a6d3fe13874
SSDEEP

24576:ggRMXX9VHtEW8kS1/lo6SoccWRNfDOW3jUHwOhMKAFrL/VBWx/BRleQp8gn527bf:lOVNLz7z7l7H3IQO61FrL9oxfl6Y236u

Score

N/A

Malware Config

Signatures

Files

80a397fa66c0c9a2a9c2b06bbbbbc1b22366a92a515af649941bc8fc83f2ff34
.exe windows x86

e93bb4ec98cbd0db060d70b649aefc44

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

userenv

LeaveCriticalPolicySection
DestroyEnvironmentBlock
EnterCriticalPolicySection
FreeGPOListW
UnregisterGPNotification
RegisterGPNotification
CreateEnvironmentBlock
GetProfilesDirectoryW
GetAppliedGPOListW

version

GetFileVersionInfoSizeW
VerInstallFileA
GetFileVersionInfoA

ntdll

ZwQueryDefaultLocale
ZwFlushWriteBuffer
ZwClose
NtAccessCheck
RtlZeroHeap
RtlUpcaseUnicodeStringToCountedOemString
RtlUnwind
RtlRunDecodeUnicodeString
RtlProtectHeap
RtlNtStatusToDosError
RtlDeleteNoSplay
NtSetValueKey
NtSetIoCompletion
NtReplyWaitReplyPort
NtPlugPlayControl
NtOpenProcess
NtCreateDirectoryObject

kernel32

FindFirstVolumeMountPointW
WriteProfileStringW
WideCharToMultiByte
WaitCommEvent
VirtualQuery
VirtualProtect
VerLanguageNameW
VerLanguageNameA
UnmapViewOfFile
UnhandledExceptionFilter
SetVolumeMountPointA
SetStdHandle
SetLastError
SetCommState
OpenSemaphoreA
LocalCompact
IsValidLanguageGroup
InitializeCriticalSectionAndSpinCount
HeapUnlock
HeapAlloc
GetVolumePathNameW
GetVolumeInformationA
GetTickCount
GetStringTypeExW
GetStringTypeExA
GetStringTypeA
GetShortPathNameW
GetProfileStringW
GetProcAddress
GetPrivateProfileSectionNamesA
GetFileSize
GetFileAttributesExW
GetCommandLineA
FindFirstVolumeMountPointA
ExitProcess
EraseTape
EnumLanguageGroupLocalesA
CallNamedPipeA
CancelIo
ChangeTimerQueueTimer
CopyFileExA
CreateProcessA
DeleteAtom
DeleteFileA

user32

CreateCursor
DefDlgProcA
FillRect
GetCursor
GetDC
GetDlgItem
GetFocus
LoadCursorA
LoadIconA
PostMessageA
SendMessageA
ShowCursor
UpdateWindow
CharPrevA

Exports

Exports

ImnkQzsZ
NagdYe
Olbiuw
UyxsmsdbAyTbBw
audaknajl
bhcyYckPkvtxrisewul
enuiWtniyeuscidJvwb
ezosyqirXhswcMtwgb
ftmjBpltpcAYunck
hiJxh
lqaybflInvvlIoi
nmthKlfLxpXIabxf
qAlchjufoHpeeF
qbtjsjqveQsNnEglyhr
qsjmpHtzidaer
sBbqeviiBaan
vvvEjtwioudjzltwlop
vzdNpcswce

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 487KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e93bb4ec98cbd0db060d70b649aefc44

Headers

File Characteristics

Imports

userenv

version

ntdll

kernel32

user32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 56KB

.data Size: 487KB - Virtual size: 1.1MB

.rsrc Size: 51KB - Virtual size: 51KB

.text
Size: 56KB - Virtual size: 56KB

.data
Size: 487KB - Virtual size: 1.1MB

.rsrc
Size: 51KB - Virtual size: 51KB