dba48f6e66e5ba2eb258f3ec94f5e3e46df9a4b58f44cf453dc3dcf3f542e35a

General

Target

dba48f6e66e5ba2eb258f3ec94f5e3e46df9a4b58f44cf453dc3dcf3f542e35a
Size

40KB
MD5

6f0bc5ddfb73d25cb28ead61403fc4e5
SHA1

e9b34e476ef5bab09616c463d3c9cd62a56afcd4
SHA256

dba48f6e66e5ba2eb258f3ec94f5e3e46df9a4b58f44cf453dc3dcf3f542e35a
SHA512

6d92a3934b29468e699cf3a214a79d1b826ff7b1792897b3817c7c7917d90e300d98f40b37bf55ce0d4eb25e6899d52ef39e939eda1f438b2f7c4e816e235375
SSDEEP

768:uljsvJzmrlwyxFNm2XQdPg5fUuKEqm/kFoSA:isvErlbRXePgrK/FoSA

Score

N/A

Malware Config

Signatures

Files

dba48f6e66e5ba2eb258f3ec94f5e3e46df9a4b58f44cf453dc3dcf3f542e35a
.exe windows x86

b6d1fc8a29b9d278af52c0851a9588bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetCurrentProcess
MoveFileExA
GetLastError
FindFirstFileA
FindClose
GetSystemDirectoryA
SetHandleCount
FreeEnvironmentStringsA
FreeEnvironmentStringsW
HeapAlloc
LCMapStringW
LCMapStringA
SetEnvironmentVariableA
CompareStringW
CompareStringA
LoadLibraryA
WriteFile
SetFilePointer
ReadFile
GetFileType
CreateFileA
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
SetStdHandle
CloseHandle
GetStdHandle
GetStartupInfoA
SetEndOfFile
GetFileAttributesA
GetOEMCP
UnhandledExceptionFilter
GetModuleFileNameA
WaitForSingleObject
GetProcAddress
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetExitCodeProcess
FlushFileBuffers
CreateProcessA
VirtualAlloc
HeapReAlloc
IsBadWritePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP

user32

ExitWindowsEx

advapi32

RegLoadKeyA
RegUnLoadKeyA
RegSaveKeyA
RegOpenKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

pdh

PdhOpenQueryA
PdhMakeCounterPathA
PdhAddCounterA
PdhCollectQueryData
PdhGetRawCounterValue
PdhCloseQuery

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b6d1fc8a29b9d278af52c0851a9588bf

Headers

File Characteristics

Imports

kernel32

user32

advapi32

pdh

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 10KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 10KB