7d9da6e8b116c5c8bc328a82a76057c66658e3da4e55eedf385fd06e0946c212

General

Target

7d9da6e8b116c5c8bc328a82a76057c66658e3da4e55eedf385fd06e0946c212
Size

168KB
MD5

eed1cf5c1c89ec4a8fda45b4cc846c90
SHA1

cfcdca1d63ecd97f75223da330dbc9eb83321862
SHA256

7d9da6e8b116c5c8bc328a82a76057c66658e3da4e55eedf385fd06e0946c212
SHA512

6472ea1cbb5d214a193a58fbb84cb6570623049050c7a0c4e451d9500b6a1449d59b33414dec32bec5cfa862d2cf81e7a1ed5079dd3d6b8252f93f03ebb74edb
SSDEEP

3072:/BvRIxbjtFsW/hifbOX5w9uAXk9beiW+Me4GW0wcOB80TLbN6P6U:ZGx+fKXIuxn14GW0wVfN6P

Score

N/A

Malware Config

Signatures

Files

7d9da6e8b116c5c8bc328a82a76057c66658e3da4e55eedf385fd06e0946c212
.dll windows x86

7c795d560e5e31b971936f6d21e7c118

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
GetExitCodeThread
LoadLibraryW
GetProcAddress
FreeLibrary
GetVersionExW
lstrcpyW
lstrcmpiW
lstrlenW
LocalFree
GetCommandLineW
GetCurrentDirectoryW
GetExitCodeProcess
GetStdHandle
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThreadId
CloseHandle
HeapFree
HeapAlloc
GetProcessHeap
GetEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoA
ExitProcess
GetLastError
OutputDebugStringW

user32

IsCharLowerA
CharUpperBuffA
LoadStringW

advapi32

CreateProcessWithLogonW
CreateProcessAsUserW

shell32

CommandLineToArgvW

secur32

GetUserNameExW

crypt32

CertFreeCertificateContext
CertGetCertificateContextProperty
CertFindCertificateInStore
CertOpenSystemStoreW
CertGetNameStringW
CertCloseStore

Exports

Exports

SeparateIsPartitionNotOr
TheDevicesByLicensedIdentified
ThroughThoseYourThat

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 734B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7c795d560e5e31b971936f6d21e7c118

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

secur32

crypt32

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 74KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 40KB - Virtual size: 110KB

.rsrc Size: 20KB - Virtual size: 19KB

.reloc Size: 4KB - Virtual size: 734B

.text
Size: 76KB - Virtual size: 74KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 40KB - Virtual size: 110KB

.rsrc
Size: 20KB - Virtual size: 19KB

.reloc
Size: 4KB - Virtual size: 734B