b0745fa26de6d687c1fa325b0d9d091d86ade23d93517b2f8f08a50eee73a2d8

General

Target

b0745fa26de6d687c1fa325b0d9d091d86ade23d93517b2f8f08a50eee73a2d8
Size

1.1MB
MD5

4d88e4e8abae3968f24835f358498dd6
SHA1

e5195c46820b0143538e724f28271afd359f239d
SHA256

b0745fa26de6d687c1fa325b0d9d091d86ade23d93517b2f8f08a50eee73a2d8
SHA512

75927b7a3e1149dac1bb00a632142903e42eddb5dc2c0088285ad00255aacc0271760b69544306d82da1a169608c715f39088b443ac04ba484afd1b1c8c526f6
SSDEEP

24576:AtK4SvD5NBeVtIlO4mPCMwNgUpwdS902ovk5dIv:A1SvD38/Z14gUpmb8vI

Score

N/A

Malware Config

Signatures

Files

b0745fa26de6d687c1fa325b0d9d091d86ade23d93517b2f8f08a50eee73a2d8
.exe windows x86

15b9549097e6154d2f4ecfb0183a5df1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchange
GetVersionExA
DisableThreadLibraryCalls
UnhandledExceptionFilter
IsDebuggerPresent
WaitForSingleObject
SystemTimeToTzSpecificLocalTime
SetEvent
ReleaseMutex
GetProcAddress
GetAtomNameA
FileTimeToSystemTime
CreateMutexA
CreateEventA
VirtualAlloc
AddAtomA
WideCharToMultiByte
VirtualQuery
TlsGetValue
Sleep
QueryPerformanceCounter
MultiByteToWideChar
LoadLibraryA
LeaveCriticalSection
GetSystemTimeAsFileTime
GetModuleHandleA
GetLastError
FreeLibrary
DeleteCriticalSection
CreateFileA
WriteFile
DeleteFileA
RemoveDirectoryA
CloseHandle
lstrcmpiW

advapi32

RegOpenKeyExA
OpenProcessToken

msvcrt

exit
time
strrchr
strncpy
sscanf
mktime
memset
localtime
gmtime
asctime
strlen
strerror
strcpy
strcmp
strchr
malloc
getenv
fwrite
free
fclose
calloc
abort
strtoul
isprint
printf

crypt32

CertGetPublicKeyLength
CertFreeCertificateContext

Sections

.text
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15b9549097e6154d2f4ecfb0183a5df1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

msvcrt

crypt32

Sections

.text Size: 120KB - Virtual size: 116KB

.rdata Size: 80KB - Virtual size: 76KB

.data Size: 32KB - Virtual size: 2.2MB

.rsrc Size: 28KB - Virtual size: 26KB

.text
Size: 120KB - Virtual size: 116KB

.rdata
Size: 80KB - Virtual size: 76KB

.data
Size: 32KB - Virtual size: 2.2MB

.rsrc
Size: 28KB - Virtual size: 26KB