b1603bb83fed5d66555557a48ebd77f3cf814d4f605756375399eb325be3ec8c

General

Target

b1603bb83fed5d66555557a48ebd77f3cf814d4f605756375399eb325be3ec8c
Size

334KB
MD5

dc26e63e4a7a6384cd7066a6307dc734
SHA1

eed7d64c456ad07d2716f181b80fdde7ed2bfbb4
SHA256

b1603bb83fed5d66555557a48ebd77f3cf814d4f605756375399eb325be3ec8c
SHA512

a4dc96eee8630be584e7c654059f56f7e8d43a4ab7ea09a0f6dbd722520cf7ff246faf9c564cff56e80b811b85b143f761716351465e4467692aab2f09ccc4bf
SSDEEP

6144:8houFFAzvKKsN3AbOVq7fC6nEtLFA+UsSMPzVjbCaX6US/nyurw///////////y:TIFmyz3UglouTBSMPpjh0yurL

Score

N/A

Malware Config

Signatures

Files

b1603bb83fed5d66555557a48ebd77f3cf814d4f605756375399eb325be3ec8c
.exe windows x86

e2dff101d433ef870e21b38c20e96fcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegNotifyChangeKeyValue
CloseEventLog
RegQueryValueA
OpenBackupEventLogA
ReportEventW
ReadEventLogA
RegCreateKeyExA
BackupEventLogW

shlwapi

StrIsIntlEqualW
PathIsUNCW
StrRChrIA
PathBuildRootW
PathUnquoteSpacesW
SHRegDeleteEmptyUSKeyW
SHEnumValueA
StrCSpnIA
PathCompactPathW
PathAppendW
PathIsFileSpecW
PathStripToRootW
StrIsIntlEqualA

kernel32

GetModuleHandleA
VirtualAllocEx
FreeEnvironmentStringsA
GetProcAddress
WriteProfileSectionA
WritePrivateProfileStringA
GetOverlappedResult
InitializeCriticalSection
VirtualFreeEx
GetStringTypeA
HeapSize
HeapWalk
PulseEvent
VerLanguageNameA
MultiByteToWideChar
VirtualProtectEx
GetTimeFormatA
DeleteCriticalSection
GetDateFormatA
LocalFlags
HeapLock
HeapFree
GetStartupInfoA

version

VerQueryValueA
VerFindFileA
GetFileVersionInfoSizeA
VerInstallFileA
GetFileVersionInfoA

netapi32

NetGroupSetUsers
NetGetAnyDCName
NetGetJoinInformation
NetAuditClear
NetConfigSet
NetFileEnum
NetConnectionEnum
NetFileGetInfo
NetAuditRead
NetConfigGet
Netbios
NetGroupGetInfo

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 312KB - Virtual size: 413KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2dff101d433ef870e21b38c20e96fcb

Headers

File Characteristics

Imports

advapi32

shlwapi

kernel32

version

netapi32

msvcrt

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 312KB - Virtual size: 413KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 312KB - Virtual size: 413KB

.rsrc
Size: 6KB - Virtual size: 5KB