5d15bed3e1708fbbaa66a20d751f10a4fd258301e47a74fa6f36be22335636d5

General

Target

5d15bed3e1708fbbaa66a20d751f10a4fd258301e47a74fa6f36be22335636d5
Size

29KB
MD5

01783118446a4b0c7fa3e0655c5d2c24
SHA1

f69595bc4ec33fd096a090067e398385bd945237
SHA256

5d15bed3e1708fbbaa66a20d751f10a4fd258301e47a74fa6f36be22335636d5
SHA512

7fbad46cdd739b31def41b5c68795763dfad020be9ea9966428813acf606fd29e46928dac8a1f54b73435753faf9f0609061768a7052066023b4f5750a78ba9b
SSDEEP

768:2XO4ZECupQl2hUWoYJaa3Az+xJD1v8Pf:OlCU38zxH8

Score

N/A

Malware Config

Signatures

Files

5d15bed3e1708fbbaa66a20d751f10a4fd258301e47a74fa6f36be22335636d5
.exe windows x86

2bbc346ef117e384734b2993e8bc7231

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileA
CreateEventA
lstrcatA
WaitForSingleObject
Sleep
CloseHandle
DeleteFileA
ExitThread
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree
SetEvent
CreateThread
CreateProcessA
GetSystemDirectoryA
lstrlenA
lstrcmpA
WaitForMultipleObjects
ResetEvent
WaitForSingleObjectEx
WriteFileEx
SizeofResource
LoadResource
FindResourceA
Process32Next
Process32First
CreateToolhelp32Snapshot
SetFileAttributesA
SetFileAttributesW
lstrcpyA
WinExec

user32

PeekMessageA
CreateWindowExA
CharUpperA
DispatchMessageA
MsgWaitForMultipleObjects
DestroyWindow
wsprintfA
TranslateMessage

advapi32

RegNotifyChangeKeyValue
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA

ole32

CoInitialize
CoUninitialize

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2bbc346ef117e384734b2993e8bc7231

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 18KB - Virtual size: 17KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 18KB - Virtual size: 17KB