d6ed6da63519ff0f988ed716036086b0b200a1ee6e59d1aba7968995e393ac3a

General

Target

d6ed6da63519ff0f988ed716036086b0b200a1ee6e59d1aba7968995e393ac3a
Size

244KB
MD5

9241fbba10335023466da5e836c1a6cf
SHA1

b6fba853aec32452c9ef42f86d234cad368ceeeb
SHA256

d6ed6da63519ff0f988ed716036086b0b200a1ee6e59d1aba7968995e393ac3a
SHA512

a7d6efb3292b149be85c1b915598320f0d6c4a9517e0ff0974559eb36531643a6a5a6c9633580d9df30b74ef44c27f88fccfa30588d1ffb7ac77542ed033072c
SSDEEP

3072:xQCyrHY7fsDzAhjg/j0XINhwHL00VWAE9HamCkDu0jNII5dvzLSKLdzN/4i7HBYP:xQCNTsW8AY3CeAMHDTxdvPSKN/4uHa

Score

N/A

Malware Config

Signatures

Files

d6ed6da63519ff0f988ed716036086b0b200a1ee6e59d1aba7968995e393ac3a
.exe windows x86

a801fc447641b6cb70104759b2983f85

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

BackupEventLogW
RegisterEventSourceW
RegDeleteKeyA
OpenBackupEventLogW
RegQueryMultipleValuesA
GetOldestEventLogRecord
ReadEventLogA
BackupEventLogA
RegConnectRegistryA

kernel32

InitializeCriticalSection
WritePrivateProfileSectionA
GetPrivateProfileStructA
WriteProfileStringA
GetProcAddress
TlsGetValue
LocalReAlloc
LocalLock
LocalFree
TlsSetValue
GetLastError
GetACP
VirtualAlloc
LocalHandle
GetModuleHandleA
GetStartupInfoA

secur32

InitializeSecurityContextA
DecryptMessage
MakeSignature
ApplyControlToken
FreeCredentialsHandle
ExportSecurityContext
AcceptSecurityContext
EncryptMessage
VerifySignature
CompleteAuthToken

msvcrt

__getmainargs
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_exit
_XcptFilter
exit
_acmdln
__setusermatherr
_initterm

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a801fc447641b6cb70104759b2983f85

Headers

File Characteristics

Imports

advapi32

kernel32

secur32

msvcrt

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 203KB - Virtual size: 203KB

.data Size: 512B - Virtual size: 364KB

.rsrc Size: 25KB - Virtual size: 25KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 203KB - Virtual size: 203KB

.data
Size: 512B - Virtual size: 364KB

.rsrc
Size: 25KB - Virtual size: 25KB