aa076c657971859a8eb627de71ba2fa9559a7e1bfaa120dab1255b7f569cadc2

Sharing

Copy URL Twitter E-mail

General

Target

aa076c657971859a8eb627de71ba2fa9559a7e1bfaa120dab1255b7f569cadc2
Size

324KB
MD5

04dce3ff369f6220a78b5e053b5c0586
SHA1

3073ff0736cf1e3545d80bf6f73812051dc26800
SHA256

aa076c657971859a8eb627de71ba2fa9559a7e1bfaa120dab1255b7f569cadc2
SHA512

745717641b28889f69b902e5d9d1b34649509bd763107d482f2c5727fc9f0999ba775c7017b6529a2ebf7e70306b8c0654976bdb9dfc6e80415f498d2ff8389a
SSDEEP

6144:8x+Nfq/yBGf/Uc3k2Fqj1ZWl8MCU2lP64t9WC1o699FfRlGU8aErWhD0LNTb9PSc:8uSN/JUEaW7CrP64XWsd9r5SaErwD0L2

Score

N/A

Malware Config

Signatures

Files

aa076c657971859a8eb627de71ba2fa9559a7e1bfaa120dab1255b7f569cadc2
.exe windows x86

d94bf6328d51f0ad85f7256a32e7f5da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW
RegEnumKeyExW

kernel32

lstrcpyW
lstrlenA
HeapDestroy
SizeofResource
LeaveCriticalSection
InitializeCriticalSection
lstrcmpiW
DeleteCriticalSection
InterlockedDecrement
GetModuleFileNameW
FindResourceW
MultiByteToWideChar
DisableThreadLibraryCalls
lstrcatW
GetStartupInfoA
InterlockedIncrement
lstrcpynW
EnterCriticalSection
LoadLibraryExW
GetACP
GetLastError
LoadResource

user32

CharNextW

msvcrt

_except_handler3
__CxxFrameHandler
malloc
_purecall
realloc
_adjust_fdiv
free
wcscpy
wcsncpy
_initterm
wcslen
wcsncat

ole32

CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree

ntdll

RtlAdjustPrivilege
RtlAddAccessAllowedAceEx
NtAllocateVirtualMemory

rpcrt4

RpcStringFreeW

oleaut32

VariantClear

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d94bf6328d51f0ad85f7256a32e7f5da

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

msvcrt

ole32

ntdll

rpcrt4

oleaut32

Sections

.text Size: 9KB - Virtual size: 8KB

.rsrc Size: 12KB - Virtual size: 11KB

.data Size: 3KB - Virtual size: 1.4MB

.rdata Size: 298KB - Virtual size: 298KB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 12KB - Virtual size: 11KB

.data
Size: 3KB - Virtual size: 1.4MB

.rdata
Size: 298KB - Virtual size: 298KB

.tls
Size: 512B - Virtual size: 4KB