f6d60d04620c97a62bd2343f5ef1e027122d33b3c07194190e6adc6933d8620d

General

Target

f6d60d04620c97a62bd2343f5ef1e027122d33b3c07194190e6adc6933d8620d
Size

297KB
MD5

11c70b0c156fbb8fc89365428a33210c
SHA1

e594231e45643f59b0133155d5bad85519270df1
SHA256

f6d60d04620c97a62bd2343f5ef1e027122d33b3c07194190e6adc6933d8620d
SHA512

a707f738c08450870dac5fdddc478f7af39b4ec75c5432095fd65e68d63d269dab8b0ebb1336c38a0b69235c54b1a4d0277eb087ae79554ba0b0fb067b834d0a
SSDEEP

3072:NNqrQ+SWh61zn/fQf+qa3jdmPEMM3JHkGKMMiU1m9:jmh61D/f8edmsMwkGKNP

Score

N/A

Malware Config

Signatures

Files

f6d60d04620c97a62bd2343f5ef1e027122d33b3c07194190e6adc6933d8620d
.exe windows x86

9b78dc465aa49a435e17ef945d275bb2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantCopyInd
VariantClear
SysFreeString
SysAllocStringLen
LoadTypeLib

advapi32

ControlService
StartServiceA
OpenProcessToken
SetSecurityDescriptorDacl
QueryServiceStatus

ole32

WriteFmtUserTypeStg
GetRunningObjectTable
GetConvertStg
CoDisconnectObject
CreateDataAdviseHolder
CreateBindCtx
CoTaskMemAlloc
CoGetMalloc
CoGetClassObject

user32

SetCursor
MessageBoxIndirectA
DrawIcon
DefDlgProcA
ShowOwnedPopups

shell32

SHGetFileInfoA
SHBindToParent
SHFileOperationA

shlwapi

PathFindExtensionA
PathCompactPathExA
PathCanonicalizeA
PathIsDirectoryA
PathQuoteSpacesA
PathUnquoteSpacesA

msvcrt

time
strstr
sprintf
memchr
rand
fflush
malloc
vsprintf

kernel32

TlsSetValue
lstrcatA
lstrcpyA
RaiseException
LocalAlloc
GetDateFormatA
FreeResource
FlushFileBuffers
EnumResourceLanguagesA
ReadFile

Exports

Exports

Fny
Fzm
Gye
Jaj
Mfk
Mnc
Qwh
Tqp
Vam
Vgv
Xbn
Xqd
Ygl

Sections

.text
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 178KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b78dc465aa49a435e17ef945d275bb2

Headers

File Characteristics

Imports

oleaut32

advapi32

ole32

user32

shell32

shlwapi

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 28KB

.rdata Size: 34KB - Virtual size: 36KB

.data Size: 34KB - Virtual size: 36KB

.idata Size: 178KB - Virtual size: 180KB

.rsrc Size: 24KB - Virtual size: 28KB

.text
Size: 25KB - Virtual size: 28KB

.rdata
Size: 34KB - Virtual size: 36KB

.data
Size: 34KB - Virtual size: 36KB

.idata
Size: 178KB - Virtual size: 180KB

.rsrc
Size: 24KB - Virtual size: 28KB