7877f8bf7b2fb059b0adce86d8dc1613cda46c108b80920a39329f086f518213

General

Target

7877f8bf7b2fb059b0adce86d8dc1613cda46c108b80920a39329f086f518213
Size

150KB
MD5

db849b87e1d1d35e49ec572c1c38bb96
SHA1

8ca23fff5a7ea03131234628374803db5d58da93
SHA256

7877f8bf7b2fb059b0adce86d8dc1613cda46c108b80920a39329f086f518213
SHA512

f788e8f2cef8031dc75f794a20629622aa80c5fae644ea6ba5c1580e89cd41f32ab9a9ece2eadd3462343a4797693263755089cb99e2065a6198e2894112affd
SSDEEP

3072:BSomz19bDK8PkoS9/b180oCD15D6/i0cbJ8C3Yrrr7Exg:B0Z9bm8Pa/58eDH6K3J8GYrLqg

Score

N/A

Malware Config

Signatures

Files

7877f8bf7b2fb059b0adce86d8dc1613cda46c108b80920a39329f086f518213
.exe windows x86

7c9791aa2f7a03ef51fc3ec871a4006a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
MultiByteToWideChar
UnhandledExceptionFilter
WideCharToMultiByte
GetCurrentThreadId
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
QueryPerformanceCounter
ExitProcess
Beep
LocalFree
GetCurrentProcessId

user32

LoadStringA
MessageBoxA
GetSystemMetrics
LoadStringW

msvcrt

wcschr
wcscspn
strchr
malloc
free
_mbschr
strcspn
_initterm
_except_handler3
_vsnprintf
_adjust_fdiv
wcslen

rpcrt4

RpcBindingFree
RpcStringFreeW
I_RpcExceptionFilter
NdrClientCall2
RpcBindingFromStringBindingW
RpcStringBindingComposeW

advapi32

GetSecurityDescriptorLength
GetSecurityDescriptorControl
IsValidSecurityDescriptor
MakeSelfRelativeSD

ntdll

NtLoadKey
NtAllocateVirtualMemory

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7c9791aa2f7a03ef51fc3ec871a4006a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcrt

rpcrt4

advapi32

ntdll

Sections

.text Size: 5KB - Virtual size: 4KB

.rsrc Size: 121KB - Virtual size: 121KB

.data Size: 4KB - Virtual size: 352KB

.rdata Size: 17KB - Virtual size: 17KB

.reloc Size: 512B - Virtual size: 24B

.text
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 121KB - Virtual size: 121KB

.data
Size: 4KB - Virtual size: 352KB

.rdata
Size: 17KB - Virtual size: 17KB

.reloc
Size: 512B - Virtual size: 24B