6e757c4bbe5dde1db9b6056f388afc76c5a1fc1473d75300c8c8f80d33f4ed47

Sharing

Copy URL

Twitter E-mail

General

Target

6e757c4bbe5dde1db9b6056f388afc76c5a1fc1473d75300c8c8f80d33f4ed47
Size

249KB
MD5

116da30eed270cb1d62fb949f1d23bb0
SHA1

926897737b21a6ea62ac1433870c624d42c372cf
SHA256

6e757c4bbe5dde1db9b6056f388afc76c5a1fc1473d75300c8c8f80d33f4ed47
SHA512

28b247658f87720c56cab56bca183ecabc12419cab5a7a584511ccb94d7c00c4cf18f4cdcbdd0d886f4e6ea905c16d082c204843e9b2e6cbece5d4574644795a
SSDEEP

6144:VaXzmyhQkUL9l7O2sO51lH2eCA/KfOpaYa:8zrhQkUBl7O2sO511YcKr

Score

N/A

Malware Config

Signatures

Files

6e757c4bbe5dde1db9b6056f388afc76c5a1fc1473d75300c8c8f80d33f4ed47
.exe windows x86

920adaf701b2b1b5b9c4460954a5e182

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
GetModuleHandleA
LockResource
LoadResource
FindResourceExA
SetFilePointer
CreateFileA
CreateFileW
ReadFile
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
GetFullPathNameA
GetFullPathNameW
IsDBCSLeadByteEx
IsValidCodePage
FreeLibrary
GetSystemTimeAsFileTime
CloseHandle
CreateEventW
DeleteCriticalSection
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetLocalTime
VirtualAlloc

user32

MessageBoxA

advapi32

RegEnumKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

query

FsCiShutdown
LoadIFilter
CIRestrictionToFullTree
CollectCIPerformanceData
CIMakeICommand

mapistub

BMAPIResolveName
DllGetClassObject
GetTnefStreamCodepage
cmc_list

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.q
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Pq
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.n
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yKR
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BqEEa
Size: 512B - Virtual size: 575B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.YcfIL
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yqzKd
Size: 1024B - Virtual size: 1006B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 213KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uzSCBc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.odP
Size: 512B - Virtual size: 370B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

920adaf701b2b1b5b9c4460954a5e182

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

query

mapistub

Sections

.text Size: 19KB - Virtual size: 19KB

.q Size: 1KB - Virtual size: 1KB

.Pq Size: 1KB - Virtual size: 1KB

.n Size: 1024B - Virtual size: 1KB

.rdata Size: 1KB - Virtual size: 1KB

.yKR Size: 1024B - Virtual size: 1KB

.BqEEa Size: 512B - Virtual size: 575B

.YcfIL Size: 2KB - Virtual size: 2KB

.yqzKd Size: 1024B - Virtual size: 1006B

.data Size: 213KB - Virtual size: 464KB

.uzSCBc Size: 1KB - Virtual size: 1KB

.odP Size: 512B - Virtual size: 370B

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 19KB - Virtual size: 19KB

.q
Size: 1KB - Virtual size: 1KB

.Pq
Size: 1KB - Virtual size: 1KB

.n
Size: 1024B - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB

.yKR
Size: 1024B - Virtual size: 1KB

.BqEEa
Size: 512B - Virtual size: 575B

.YcfIL
Size: 2KB - Virtual size: 2KB

.yqzKd
Size: 1024B - Virtual size: 1006B

.data
Size: 213KB - Virtual size: 464KB

.uzSCBc
Size: 1KB - Virtual size: 1KB

.odP
Size: 512B - Virtual size: 370B

.rsrc
Size: 3KB - Virtual size: 3KB