1227c6937c1c8fb9817d7fbdd64843118460c4743f5ecc770d71c10d2b48713f

Sharing

Copy URL Twitter E-mail

General

Target

1227c6937c1c8fb9817d7fbdd64843118460c4743f5ecc770d71c10d2b48713f
Size

173KB
MD5

b97c4bef252e7a91cb32e0172d2b9807
SHA1

3c348b3c3f10017aa195610fea100437f94ced44
SHA256

1227c6937c1c8fb9817d7fbdd64843118460c4743f5ecc770d71c10d2b48713f
SHA512

475a5b05ebe7a3bd4cbba44d50da9d7f2e9095da43f196be709d750f86695fe63e33c1fa11a58c64ae9599f1fa2169ed8e6363c066f7568d17c67d3681e7dbef
SSDEEP

3072:+as83wrzqoX5Ljf1GHwqpCD5eTgujwOK7a9b9kz0A59fQhnaGj:+783wioXFTgQKjwO38oAH8a

Score

N/A

Malware Config

Signatures

Files

1227c6937c1c8fb9817d7fbdd64843118460c4743f5ecc770d71c10d2b48713f
.exe windows x86

0b36269640ba0e2a00511b2d6697873b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

IsEqualGUID

advapi32

RegCloseKey
RegDeleteValueA
AdjustTokenPrivileges
RegDeleteKeyA
OpenProcessToken
RegOpenKeyExA
RegOpenKeyA
LookupPrivilegeValueA
RegQueryValueExA

oleaut32

SysReAllocStringLen
VariantChangeTypeEx
SysAllocStringLen
VariantClear
SysFreeString
VariantCopyInd
SysStringLen

kernel32

GetSystemInfo
GetEnvironmentStringsA
SetConsoleCtrlHandler
SetEvent
lstrcmpA
GetStartupInfoA
GetStdHandle
GetWindowsDirectoryA
LockResource
RaiseException
WideCharToMultiByte
GlobalReAlloc
GetDiskFreeSpaceA
GetModuleHandleA
LoadResource
ExitProcess
GetFileSize
SetErrorMode
VirtualAlloc
DeleteCriticalSection
LocalAlloc
DeleteFileA
GlobalHandle
CompareStringA
CreateEventA
Sleep
InterlockedIncrement
GetCurrentThreadId
HeapFree
GetCommandLineA
LocalFree
GetVersionExA
TlsGetValue
LeaveCriticalSection
GlobalAddAtomA
GetStringTypeW
SetHandleCount
EnumCalendarInfoA
GetProcessHeap
GetLocalTime
GetLocaleInfoA
GlobalFree
InterlockedDecrement
GlobalDeleteAtom
HeapAlloc
CloseHandle
WaitForSingleObject
VirtualFree
GlobalUnlock
GetVersion
SetLastError
LoadLibraryExA
GetSystemDirectoryA
FindClose
CreateThread
GetModuleFileNameA
GetPrivateProfileStringA
FreeResource
TlsAlloc
EnterCriticalSection
SetFilePointer
InitializeCriticalSection
FindResourceA
VirtualQuery
GetOEMCP
LoadLibraryA
GetCurrentProcess
FormatMessageA
GlobalLock
CreateFileA
SetThreadLocale
RtlUnwind
FindFirstFileA
lstrcpyA
GetCPInfo
WriteFile
FreeLibrary
SetEndOfFile
lstrlenA
TlsFree
GetFileType
GetTickCount
SizeofResource
MulDiv
TlsSetValue
GetLastError
MultiByteToWideChar
GetACP
ReadFile
UnhandledExceptionFilter
GlobalAlloc
GetThreadLocale
GetProcAddress
lstrcpynA
WinExec

Sections

.text
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b36269640ba0e2a00511b2d6697873b

Headers

File Characteristics

Imports

ole32

advapi32

oleaut32

kernel32

Sections

.text Size: 145KB - Virtual size: 145KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 17KB - Virtual size: 18KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 145KB - Virtual size: 145KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 17KB - Virtual size: 18KB

.rsrc
Size: 2KB - Virtual size: 1KB