6672605485c194d130e31ad4e6136ad357ccfd81b3e886549e6612c946962874

General

Target

6672605485c194d130e31ad4e6136ad357ccfd81b3e886549e6612c946962874
Size

212KB
MD5

0fb46774cac759aff9535b0b713cda97
SHA1

e4314c3055a70315e2059a2e15f40cdef3f9c3cb
SHA256

6672605485c194d130e31ad4e6136ad357ccfd81b3e886549e6612c946962874
SHA512

d710493efbfdd3c5a8100da140cc8bee0ee3a115d384f71d9377736fd22e1983cefe4551b9462de2ff85b4b893e9ee69bbeb0ae920c12fa6373c036e10720e9c
SSDEEP

6144:3PqMa70fWqU+mwVVZ7+ykFNaX/HYGb4HETz:3P0t+vVVZyyoN2YGb

Score

N/A

Malware Config

Signatures

Files

6672605485c194d130e31ad4e6136ad357ccfd81b3e886549e6612c946962874
.exe windows x86

33b5e23d6ad80093c31498faf7454b7f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
MoveFileA
lstrlenA
LCMapStringW
FindNextFileW
OpenFile
MultiByteToWideChar
CreateFileMappingA
FindResourceA
WriteFile
LocalLock
IsValidLanguageGroup
FileTimeToSystemTime
EnumResourceLanguagesA
UnmapViewOfFile
WaitForMultipleObjects
LockFile
IsValidLocale
FlushViewOfFile
GetHandleInformation
GetCommProperties
FileTimeToDosDateTime
GetShortPathNameW
SetSystemTime
_lwrite
HeapUnlock
FindResourceW
CreateMailslotW
FormatMessageW
SetCommBreak
GetCommandLineA
GetVersionExA
SetHandleCount
VirtualProtect
GetCommModemStatus
CreateNamedPipeA
GetDateFormatW
GetFullPathNameA
ClearCommError
ReadFile
EnumResourceNamesA
FindNextChangeNotification
SizeofResource
CreatePipe
CompareStringA

psapi

QueryWorkingSet

shlwapi

PathUnmakeSystemFolderA

advapi32

RegQueryValueExA
RegQueryValueExW
RegReplaceKeyA

user32

IsCharAlphaNumericA

Exports

Exports

_IsWow64MessageIsWow64Message@0

Sections

.text
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 990B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33b5e23d6ad80093c31498faf7454b7f

Headers

File Characteristics

Imports

kernel32

psapi

shlwapi

advapi32

user32

Exports

Exports

Sections

.text Size: 204KB - Virtual size: 203KB

.data Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 990B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 204KB - Virtual size: 203KB

.data
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 990B

.reloc
Size: 3KB - Virtual size: 2KB