2c15a992edbe7eb21458d62234babf3143fa01707b4b608beb18e40875cbe3d4

General

Target

2c15a992edbe7eb21458d62234babf3143fa01707b4b608beb18e40875cbe3d4
Size

60KB
MD5

c21597828fda58953a2f5131b0666d94
SHA1

c050017154c6a6ebfe1e15bd9fb5717f31045f6d
SHA256

2c15a992edbe7eb21458d62234babf3143fa01707b4b608beb18e40875cbe3d4
SHA512

39793a8ead404ec0f7c706c51fb99d7d64601977d78e6427c779a8311ce4b04a5f322310aaf1b7412aada75e538683acb4012de8c8fd9c1d59f4ff82774d3a8a
SSDEEP

768:80xZ3sct2eIkLRZ39GoG6o5iWFn9OaCOUGeLhkn67YxtZ:8wZxtZLRZ3bpo1F9HCOcSzT

Score

N/A

Malware Config

Signatures

Files

2c15a992edbe7eb21458d62234babf3143fa01707b4b608beb18e40875cbe3d4
.exe windows x86

b0ac93b003d4d792dbd8323578875017

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageA
GetModuleFileNameA
CopyFileA
GetLastError
GetWindowsDirectoryA
FreeEnvironmentStringsA
GetFileType
GetStdHandle
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
LocalFree
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetProcAddress
LoadLibraryA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapAlloc
VirtualAlloc
HeapReAlloc

user32

MessageBoxA

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 108KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rqkknrd
Size: 36KB - Virtual size: 76KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b0ac93b003d4d792dbd8323578875017

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 108KB - Virtual size: 136KB

rqkknrd Size: 36KB - Virtual size: 76KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 108KB - Virtual size: 136KB

rqkknrd
Size: 36KB - Virtual size: 76KB