91068a04d767a6a24d5d3007df38f8c47c87e42725c0b06b9dc0cce7e293ef32

General

Target

91068a04d767a6a24d5d3007df38f8c47c87e42725c0b06b9dc0cce7e293ef32
Size

132KB
MD5

7742b2ee350cae69fa62c6c3a331c190
SHA1

49237cda5a85f92fa10557705d28ff35d7d324cb
SHA256

91068a04d767a6a24d5d3007df38f8c47c87e42725c0b06b9dc0cce7e293ef32
SHA512

9ddedd00fb4d70b1fd113bb8c24b9e97ed8928e07819d60c2ceaea76d1efa2c32af577262e50f121a7240be3a491bf1948dbd4b2ec499e9fc287ac613bace9e1
SSDEEP

1536:yEnYr5dYbuVjajSjJm95llPFct+faAoUt+Qeg6TKVbXNXaBwpkzeqHaQvMzhzYPS:3njbSVylFctTB9utwwGraQIBYPS

Score

N/A

Malware Config

Signatures

Files

91068a04d767a6a24d5d3007df38f8c47c87e42725c0b06b9dc0cce7e293ef32
.exe windows x86

17b7e4aa39aa256f84b12be73f0a0094

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
CreateFileW
LCMapStringW
GetLastError
GlobalAlloc
GetFileTime
ExitProcess
GetProcAddress
GetModuleHandleA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
RtlUnwind
GetLocaleInfoA
WideCharToMultiByte
VirtualAlloc
HeapReAlloc
GetStringTypeA
GetStringTypeW
LCMapStringA

user32

RegisterClassExW
LoadStringW

advapi32

RegQueryValueW

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17b7e4aa39aa256f84b12be73f0a0094

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 17KB

.tls Size: 4KB - Virtual size: 24B

.rsrc Size: 84KB - Virtual size: 81KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 17KB

.tls
Size: 4KB - Virtual size: 24B

.rsrc
Size: 84KB - Virtual size: 81KB