051620a5be5e8bf6033d4169270bd2b703b6143bd75952a1c56f3949990f9fd8

General

Target

051620a5be5e8bf6033d4169270bd2b703b6143bd75952a1c56f3949990f9fd8
Size

4.9MB
MD5

0eefe74231c7fd456f426238baf67a0c
SHA1

8f37689d94b7b3dac4c7d0274f08ac619ddc851d
SHA256

051620a5be5e8bf6033d4169270bd2b703b6143bd75952a1c56f3949990f9fd8
SHA512

b4354d4422dfab96cb7b7860330f60009e228dc5c00a311ed5227d0d413a0126da5723b4fa598656b45209d0114e1a28f19d9ae212e0d8a270e6f00c7d80ca9e
SSDEEP

98304:BTrE35GV46kaEIHOqSuGMVeZlrWohOGR9oPiRvJeVPtr6BJWRk0IkE8:cstkhIu4eZlidGXoUvJO6BJWRtIkE8

Score

N/A

Malware Config

Signatures

Files

051620a5be5e8bf6033d4169270bd2b703b6143bd75952a1c56f3949990f9fd8
.exe windows x86

4363c2ed2eb4c3b5a315d9cc021835da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA

kernel32

CloseHandle
CopyFileA
CreateDirectoryA
CreateFileA
CreateProcessA
CreateToolhelp32Snapshot
DeleteFileA
GetCommandLineW
GetCurrentProcess
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
GetStdHandle
GetSystemInfo
GetThreadContext
GetTickCount
OpenProcess
Process32First
Process32Next
QueryPerformanceCounter
ReadFile
ResumeThread
SetCurrentDirectoryA
SetPriorityClass
SetThreadContext
Sleep
TerminateProcess
VirtualProtectEx
WideCharToMultiByte
WriteProcessMemory
lstrcmpiA

msvcrt

exit
fclose
fopen
free
fwrite
malloc
sprintf
strcat
strstr

psapi

GetModuleFileNameExA

shell32

CommandLineToArgvW

user32

GetLastInputInfo

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1024B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4363c2ed2eb4c3b5a315d9cc021835da

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

psapi

shell32

user32

Sections

.text Size: 3KB - Virtual size: 3KB

.data Size: 4.9MB - Virtual size: 4.9MB

.rdata Size: 512B - Virtual size: 372B

.bss Size: - Virtual size: 1024B

.idata Size: 2KB - Virtual size: 1KB

.text
Size: 3KB - Virtual size: 3KB

.data
Size: 4.9MB - Virtual size: 4.9MB

.rdata
Size: 512B - Virtual size: 372B

.bss
Size: - Virtual size: 1024B

.idata
Size: 2KB - Virtual size: 1KB