0b24b21d14f0557a1daeb7c4eae55e6ba692302a0248099143143ab7149dba71

General

Target

0b24b21d14f0557a1daeb7c4eae55e6ba692302a0248099143143ab7149dba71
Size

794KB
MD5

0cf99be719169353ed70652befe50230
SHA1

d4313bd0b621b8b55d0f7bbd4a930b7983d6b013
SHA256

0b24b21d14f0557a1daeb7c4eae55e6ba692302a0248099143143ab7149dba71
SHA512

0c584b217bb549431cbc75f8e2c78ebb0ce3044b697b3472aadc7f8dc0fdd0d7b0ed9782937801b4d18cef3384451a200f7b79efe3c2c06d8544210007ef221e
SSDEEP

12288:2/9CieTsjGW1vn6ZnbfKqZjeKXyQ38/f48tQEUregJ3QJ7jE3gpCyCADhnmWMfA:i9CrQjGkW+MHBFregJy7vXRoI

Score

N/A

Malware Config

Signatures

Files

0b24b21d14f0557a1daeb7c4eae55e6ba692302a0248099143143ab7149dba71
.exe windows x86

b197d611f879a91c444ae92b6d5033a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStringA
GetPrivateProfileIntA
GetSystemDirectoryA
FindClose
FindFirstFileA
SetFileTime
Sleep
DeleteFileA
SetFilePointer
GetFileTime
GetDriveTypeA
FindNextFileA
MoveFileExA
WaitForSingleObject
CreateEventA
ExitProcess
GetLastError
CreateMutexA
GetWindowsDirectoryA
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenProcess
GetModuleHandleA
GetModuleFileNameA
UpdateResourceA
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceA
EndUpdateResourceA
FreeLibrary
EnumResourceNamesA
LoadLibraryExA
BeginUpdateResourceA
CopyFileA
WinExec
CreateFileA
CloseHandle
ReadFile
WriteFile
SetEvent
GetCurrentProcess

user32

FindWindowA
GetWindowThreadProcessId

advapi32

AdjustTokenPrivileges
RegSetValueExA
RegCloseKey
LookupPrivilegeValueA
OpenProcessToken
RegOpenKeyA

urlmon

URLDownloadToFileA

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b197d611f879a91c444ae92b6d5033a1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

urlmon

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 448B

.rsrc Size: 62KB - Virtual size: 62KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 448B

.rsrc
Size: 62KB - Virtual size: 62KB