c18008619135e7918c43e07f75fc48fc3684328f120d9e4042f926740bcddc6f

Sharing

Copy URL Twitter E-mail

General

Target

c18008619135e7918c43e07f75fc48fc3684328f120d9e4042f926740bcddc6f
Size

283KB
MD5

b4d052a502f435ee79c38c202a3a1dda
SHA1

e88963b80e3d0bd664fbbe9c22f2c69b393657d3
SHA256

c18008619135e7918c43e07f75fc48fc3684328f120d9e4042f926740bcddc6f
SHA512

daa966590615306ba80b8fca14ebeca134025cec377707e0a0912c0b134ec9e20bfe8369af68eda8d349838b9b4427b4b6524f810bd82a4729c3421cdca2ba73
SSDEEP

6144:yFRGs+shtCYroqWPLqP1dPYBaZCgnBguvHbr9tFPEuH9Bg4:/s+shtlpWLqPjYBECgnCu/dbnHh

Score

N/A

Malware Config

Signatures

Files

c18008619135e7918c43e07f75fc48fc3684328f120d9e4042f926740bcddc6f
.exe windows x86

7c6094e18047958b3bd568db19c3a021

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateGuid

advapi32

OpenProcessToken
RegQueryValueA
RegQueryValueExA
RegOpenKeyExA
OpenThreadToken
RegCloseKey
ImpersonateLoggedOnUser
GetUserNameA
RegOpenKeyA
RevertToSelf

user32

wsprintfA

shfolder

SHGetFolderPathA

kernel32

ResetEvent
GetUserDefaultLCID
TlsGetValue
GetSystemTimeAsFileTime
FatalAppExitA
ResumeThread
SetLastError
WideCharToMultiByte
HeapReAlloc
GetExitCodeThread
GetModuleHandleA
FlushFileBuffers
SetUnhandledExceptionFilter
GetOEMCP
TlsAlloc
WriteFile
IsBadStringPtrA
UnhandledExceptionFilter
GetTimeFormatA
SetFilePointer
TerminateThread
ReadFile
CompareStringW
GetACP
IsValidCodePage
LocalFree
GetFileType
IsBadCodePtr
HeapFree
GetTimeZoneInformation
HeapDestroy
lstrcpyA
LeaveCriticalSection
CompareStringA
GetCurrentThreadId
GetCommandLineA
WaitForSingleObject
GetComputerNameA
GetSystemInfo
LCMapStringA
GetDriveTypeA
DeleteCriticalSection
GetDateFormatA
SetConsoleCtrlHandler
SetEndOfFile
WaitForMultipleObjects
HeapSize
SetHandleCount
EnterCriticalSection
CreateFileA
CloseHandle
VirtualAlloc
LCMapStringW
OpenThread
EnumSystemLocalesA
FreeEnvironmentStringsW
VirtualFree
RaiseException
FormatMessageA
FreeEnvironmentStringsA
TlsFree
VirtualProtect
VirtualQuery
HeapAlloc
CreateEventA
CreateThread
RtlUnwind
SetEnvironmentVariableA
FreeLibrary
SuspendThread
TlsSetValue
SetStdHandle
IsValidLocale
GetStdHandle
LoadLibraryW
VirtualAllocEx

esent

JetCreateIndex
JetDelete
JetUnregisterCallback
JetOpenTempTable2
JetBeginSession
JetSetSystemParameter
JetCreateTableColumnIndex2
JetSetCurrentIndex
JetPrepareToCommitTransaction
JetDefragment
JetOSSnapshotThaw
JetGetTableIndexInfo

w32topl

ToplHeapExtractMin
ToplListAddElem
ToplGraphCreate
ToplGraphFree
ToplIterGetObject
ToplScheduleDuration

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 257KB - Virtual size: 367KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7c6094e18047958b3bd568db19c3a021

Headers

File Characteristics

Imports

ole32

advapi32

user32

shfolder

kernel32

esent

w32topl

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 257KB - Virtual size: 367KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 257KB - Virtual size: 367KB

.rsrc
Size: 2KB - Virtual size: 1KB