db4126544d70f493d6085a06506cbf56b01f1b52e9d4fbbdc4e2c485b7f76286

General

Target

db4126544d70f493d6085a06506cbf56b01f1b52e9d4fbbdc4e2c485b7f76286
Size

448KB
MD5

7422638cd7f41a537ff2e84e16d2ef96
SHA1

18afd8b0220e24a92383da8d53dde326d0e8e393
SHA256

db4126544d70f493d6085a06506cbf56b01f1b52e9d4fbbdc4e2c485b7f76286
SHA512

686f1815c21235115ba5e0e06f96205d1fc0057674a27ce208b99533305d2001d14b9efbe2d525b3ec9708177c3b341b8632e508595f3a2212acff1566691864
SSDEEP

3072:ZTYso6k7toLMfJCmokSBmXtXwKLzZZwljHtnkUrGpDXb17ftv7YjUJnlXtLKWQ9J:5YN2whY1IhPiLFuJXSgzm

Score

N/A

Malware Config

Signatures

Files

db4126544d70f493d6085a06506cbf56b01f1b52e9d4fbbdc4e2c485b7f76286
.exe windows x86

10e2bbfe892cc5d66c55a46a1a0ab0bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetCurrentDirectoryA
CloseHandle
WriteFile
SetFilePointer
GetSystemDirectoryA
CreateFileA
DeleteFileA
GetCommandLineW
WinExec
GetPrivateProfileStringA
ExitProcess
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
LCMapStringA
ReadFile
GetLastError
LocalFree
SetEndOfFile
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
GetOEMCP
WideCharToMultiByte
TerminateProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP

user32

MessageBoxA

advapi32

RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA

shell32

CommandLineToArgvW
SHChangeNotify
ShellExecuteA

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10e2bbfe892cc5d66c55a46a1a0ab0bd

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 404KB - Virtual size: 404KB

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 404KB - Virtual size: 404KB