beeab1c4e3df129054b5322c67fd0279d07b4dc2be60ae4983d7857f66ffb186

Sharing

Copy URL Twitter E-mail

General

Target

beeab1c4e3df129054b5322c67fd0279d07b4dc2be60ae4983d7857f66ffb186
Size

38KB
MD5

730f74ab5d6b841dc32d5990d902f8d8
SHA1

eed4924f7cd1592e1eaf9f5a8f1b1099bf728fb7
SHA256

beeab1c4e3df129054b5322c67fd0279d07b4dc2be60ae4983d7857f66ffb186
SHA512

6264c9d963cd275f26a6f343eb03f4b8865022b954992ef3b488c81d8933b233af0d2cbe01ada1392bb2fd86935fe59d8f9d15a958e70b8d057f873008f27747
SSDEEP

768:lEVTPuG/ija+1IuhupPpr0v4w1gdpU1a2SRS7mctgLa1PYxz1fX:lElPWuphrAwk02Cc6LaYX

Score

N/A

Malware Config

Signatures

Files

beeab1c4e3df129054b5322c67fd0279d07b4dc2be60ae4983d7857f66ffb186
.exe windows x86

3053caf64de3a166af310796b04ec8a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysAllocStringLen

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegCloseKey
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA

user32

GetKeyboardType
MessageBoxA
CharToOemA

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
GetStartupInfoA
GetLastError
GetCommandLineW
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileW
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WinExec
Sleep
RemoveDirectoryW
QueryPerformanceCounter
GetProcAddress
FreeLibrary
FindClose
ExpandEnvironmentStringsW
DeleteFileW
LoadLibraryA
GetModuleFileNameA
GetFileAttributesA
GetCommandLineA
FindResourceA
FindNextFileA
FindFirstFileA

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3053caf64de3a166af310796b04ec8a3

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

Sections

.text Size: 25KB - Virtual size: 24KB

.itext Size: 512B - Virtual size: 424B

.data Size: 6KB - Virtual size: 6KB

.bss Size: - Virtual size: 10KB

.idata Size: 2KB - Virtual size: 1KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 25KB - Virtual size: 24KB

.itext
Size: 512B - Virtual size: 424B

.data
Size: 6KB - Virtual size: 6KB

.bss
Size: - Virtual size: 10KB

.idata
Size: 2KB - Virtual size: 1KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.rsrc
Size: 2KB - Virtual size: 2KB