d099164bb31be3a80391a76eae5b310bdb3521e2b2c886ed2685cfeb671b6840

Sharing

Copy URL Twitter E-mail

General

Target

d099164bb31be3a80391a76eae5b310bdb3521e2b2c886ed2685cfeb671b6840
Size

264KB
MD5

7e0a9e1af3c5ef90a72eadc6a4ad6ecd
SHA1

c1cc2bf548a47a84712795b5e424aec99f75b20e
SHA256

d099164bb31be3a80391a76eae5b310bdb3521e2b2c886ed2685cfeb671b6840
SHA512

acb7686336ea07dcd639e0188ca105e8b5a9ecba2067e7e182d665d0ddd8adaed73c6cbe7276bc735ef5362bce06a1da0a69a1515abb9c1dd31c144d5df405ec
SSDEEP

6144:3rlVrh6fSkFmTGpUpulbFrHuDpGQkwO8T62asOLNhIbwHojoDtbatbeWK:boZ8qpUwufw8T6XLNhcwHWntbbK

Score

N/A

Malware Config

Signatures

Files

d099164bb31be3a80391a76eae5b310bdb3521e2b2c886ed2685cfeb671b6840
.exe windows x86

ee238bb9626547eef1d88167d0d6cf8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHDeleteKeyA

kernel32

CreateMutexA
WaitForSingleObject
GetACP
GetModuleFileNameA
GetFileAttributesA
MultiByteToWideChar
lstrcmpiA
LoadLibraryW
GetProcAddress

advapi32

RegEnumValueA
RegQueryValueExA
RegDeleteValueA
RegCloseKey
RegCreateKeyA
RegSetValueExA

oleaut32

UnRegisterTypeLi
LoadTypeLibEx

iphlpapi

DeleteIpForwardEntry
SetIpStatistics
InternalGetIpNetTable
GetAdaptersInfo
GetFriendlyIfIndex
InternalDeleteIpNetEntry
DeleteIpNetEntry

adsnt

DllGetClassObject

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.blKQTV
Size: 5KB - Virtual size: 911KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 97KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Tg
Size: 2KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 120KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WDjuG
Size: 4KB - Virtual size: 729KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee238bb9626547eef1d88167d0d6cf8e

Headers

File Characteristics

Imports

shlwapi

kernel32

advapi32

oleaut32

iphlpapi

adsnt

Sections

.text Size: 16KB - Virtual size: 16KB

.blKQTV Size: 5KB - Virtual size: 911KB

.rdata Size: 1024B - Virtual size: 9KB

.edata Size: 97KB - Virtual size: 182KB

.Tg Size: 2KB - Virtual size: 71KB

.data Size: 6KB - Virtual size: 254KB

.edata Size: 120KB - Virtual size: 216KB

.WDjuG Size: 4KB - Virtual size: 729KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 16KB - Virtual size: 16KB

.blKQTV
Size: 5KB - Virtual size: 911KB

.rdata
Size: 1024B - Virtual size: 9KB

.edata
Size: 97KB - Virtual size: 182KB

.Tg
Size: 2KB - Virtual size: 71KB

.data
Size: 6KB - Virtual size: 254KB

.edata
Size: 120KB - Virtual size: 216KB

.WDjuG
Size: 4KB - Virtual size: 729KB

.rsrc
Size: 10KB - Virtual size: 9KB