aa803898fde3ee9371a40599fcde6fbb038ca951dc3a4640ad3dcb53a4c93191

General

Target

aa803898fde3ee9371a40599fcde6fbb038ca951dc3a4640ad3dcb53a4c93191
Size

128KB
MD5

9d733a464f2260ce7352fa52d23ea0bd
SHA1

2ede2c0eae523dd4f5b7ec193080084bbc8be6f0
SHA256

aa803898fde3ee9371a40599fcde6fbb038ca951dc3a4640ad3dcb53a4c93191
SHA512

2eca0120fe1961e346ef72e4b74be0f6a0d3ff6d4a9d9a641c3da5dc1274139eccb781afcf0080c48e49929477d7d28c7bc0ca2e1030fca650b1d38ac7d1b847
SSDEEP

3072:IbkbmM7mttn206XoEBvrY+HFHeQ/adpleUswYMlP:Skbmhn2DBvrY+l+Q/adHeNwBR

Score

N/A

Malware Config

Signatures

Files

aa803898fde3ee9371a40599fcde6fbb038ca951dc3a4640ad3dcb53a4c93191
.exe windows x86

7e1cc54340ea2bd71cac7c7d23b8e9ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
HeapFree
HeapAlloc
GetProcessHeap
ReadFile
GlobalAlloc
CreateFileA
GetModuleFileNameW
GetLocalTime
GetModuleHandleW
CreateFileW
GetProcAddress
GetVersionExA
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

advapi32

RegQueryValueW

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 4KB - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e1cc54340ea2bd71cac7c7d23b8e9ae

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 80KB - Virtual size: 82KB

.adata Size: 4KB - Virtual size: 68B

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 80KB - Virtual size: 82KB

.adata
Size: 4KB - Virtual size: 68B

.rsrc
Size: 4KB - Virtual size: 1KB