ed596ec77fe1ac7aa1dfa35eb695946e529f1cc0ef5aa4c835eb39371308017a

Sharing

Copy URL Twitter E-mail

General

Target

ed596ec77fe1ac7aa1dfa35eb695946e529f1cc0ef5aa4c835eb39371308017a
Size

173KB
MD5

a63a1816958cb309db4a420607f74a62
SHA1

6a8f61f02521545f3ba406f9a22545dfc9fe7d4b
SHA256

ed596ec77fe1ac7aa1dfa35eb695946e529f1cc0ef5aa4c835eb39371308017a
SHA512

2ce9c81fa8f9e944e2f7bed4f329a82bfa28096379e8a90614fa08d5649d7b72654f74f85addfe702634124684fa541207350313c26c7d148e9ac9ad8fc745f3
SSDEEP

3072:OqLV9XcxBPD5TBL7C4vPVBUv8KPKjJjiI3cq4REK54JR0diqGsgj:XDXcxBPtTxCcPcUgKljiI3b4REK5e6fg

Score

N/A

Malware Config

Signatures

Files

ed596ec77fe1ac7aa1dfa35eb695946e529f1cc0ef5aa4c835eb39371308017a
.exe windows x86

b98e2ac8d8d5837f5edf19f3d51b992a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysStringLen
SysFreeString
VariantChangeTypeEx
SysReAllocStringLen
VariantClear
SysAllocStringLen
VariantCopyInd

kernel32

GetEnvironmentStringsA
HeapAlloc
TlsAlloc
InitializeCriticalSection
GlobalReAlloc
FreeResource
SetLastError
GetModuleFileNameA
SetThreadLocale
GetTickCount
SetFilePointer
GlobalDeleteAtom
FindClose
GetFileType
DeleteFileA
RaiseException
lstrlenA
LoadResource
FindResourceA
lstrcmpA
FormatMessageA
GlobalAddAtomA
VirtualAlloc
GetStdHandle
TlsFree
GlobalAlloc
DeleteCriticalSection
TlsSetValue
GetLocaleInfoA
GetWindowsDirectoryA
EnterCriticalSection
RtlUnwind
VirtualFree
SetEvent
GetACP
FreeLibrary
SetEndOfFile
ExitProcess
WideCharToMultiByte
LocalAlloc
GetVersion
GetStartupInfoA
GetLastError
GlobalFree
CreateThread
lstrcpyA
WaitForSingleObject
InterlockedDecrement
LockResource
GetVersionExA
GlobalLock
CreateFileA
lstrcpynA
WriteFile
GetOEMCP
SetErrorMode
TlsGetValue
GetSystemDirectoryA
LoadLibraryExA
GetCommandLineA
GlobalHandle
GetModuleHandleA
LoadLibraryA
GetProcessHeap
GetFileSize
VirtualQuery
GetPrivateProfileStringA
MultiByteToWideChar
GetLocalTime
GlobalUnlock
FindFirstFileA
MulDiv
ReadFile
WinExec
GetDiskFreeSpaceA
GetCurrentProcess
SetConsoleCtrlHandler
InterlockedIncrement
GetStringTypeW
CompareStringA
UnhandledExceptionFilter
CreateEventA
GetCurrentThreadId
SetHandleCount
LeaveCriticalSection
EnumCalendarInfoA
CloseHandle
GetProcAddress
GetCPInfo
GetSystemInfo
GetThreadLocale
HeapFree
LocalFree
Sleep
SizeofResource

advapi32

RegOpenKeyA
RegDeleteValueA
LookupPrivilegeValueA
RegDeleteKeyA
RegQueryValueExA
OpenProcessToken
AdjustTokenPrivileges
RegCloseKey
RegOpenKeyExA

ole32

IsEqualGUID

Sections

.text
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b98e2ac8d8d5837f5edf19f3d51b992a

Headers

File Characteristics

Imports

oleaut32

kernel32

advapi32

ole32

Sections

.text Size: 145KB - Virtual size: 144KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 17KB - Virtual size: 17KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 145KB - Virtual size: 144KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 17KB - Virtual size: 17KB

.rsrc
Size: 2KB - Virtual size: 1KB