c28604872dbcf187779f8b94a71aa2ffd70166a1f1dbe8755d0b922ec55fffc7

Sharing

Copy URL Twitter E-mail

General

Target

c28604872dbcf187779f8b94a71aa2ffd70166a1f1dbe8755d0b922ec55fffc7
Size

259KB
MD5

0d056b27bf5d52d401c5c82a65f5001b
SHA1

719c1c54c539e17917fa9f488131121e2839cd1d
SHA256

c28604872dbcf187779f8b94a71aa2ffd70166a1f1dbe8755d0b922ec55fffc7
SHA512

06307968234ddb52a9fd5e94acf8a411dc179c5719573d85047acd3c72b91c09d2034c18eb27d8339757e390a5eb6d40daa18b877f699036f8dc5f3859f5db20
SSDEEP

3072:1DrbS47eSbq2aaMZy0nBi3BoE2GTW09Tfln9DdCfL:1DC4d8an3fTh1fl9DdCf

Score

N/A

Malware Config

Signatures

Files

c28604872dbcf187779f8b94a71aa2ffd70166a1f1dbe8755d0b922ec55fffc7
.exe windows x86

4ac16a032ce5650da99759e526e6256a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameW
GetModuleHandleW
GetSystemTimeAsFileTime
GetTickCount
GlobalAlloc
LoadResource
LocalFree
LockResource
OpenEventW
GetCurrentThreadId
ReadFile
SetEvent
SetFilePointer
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
lstrcatW
lstrcmpiW
lstrcpyW
lstrlenW
GetCurrentProcess
GetCurrentProcessId
GetCommandLineW
FreeResource
FreeLibrary
FindResourceW
ExitProcess
CreateProcessW
CreateEventW
CloseHandle
GetOEMCP
VirtualAlloc
LocalAlloc
GetProcessHeap
CreateFileW
QueryPerformanceCounter
GetStartupInfoA

gdi32

GetStockObject

advapi32

RegSetValueExW
RegQueryValueW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyW
RegEnumValueW
RegEnumKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyW
RegCloseKey
RegOpenKeyExW
RegSetValueW

msvcrt

_wsplitpath
ctime
memmove
time
_vsnwprintf

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text11
Size: 512B - Virtual size: 199B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text10
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ac16a032ce5650da99759e526e6256a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

advapi32

msvcrt

Sections

.text Size: 23KB - Virtual size: 22KB

.data Size: 21KB - Virtual size: 21KB

.text11 Size: 512B - Virtual size: 199B

.text10 Size: 211KB - Virtual size: 210KB

.rsrc Size: 1024B - Virtual size: 784B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 23KB - Virtual size: 22KB

.data
Size: 21KB - Virtual size: 21KB

.text11
Size: 512B - Virtual size: 199B

.text10
Size: 211KB - Virtual size: 210KB

.rsrc
Size: 1024B - Virtual size: 784B

.reloc
Size: 1KB - Virtual size: 1KB