45ffd1c4403135eb9708b6bf8c2fe64115ad24bc628f911f1e7270bbd3526912

Sharing

Copy URL Twitter E-mail

General

Target

45ffd1c4403135eb9708b6bf8c2fe64115ad24bc628f911f1e7270bbd3526912
Size

128KB
MD5

9a40c17fee38dc75662950c231373a5a
SHA1

9544d5f8001ca5d35a8ef7eca95970888f9ba748
SHA256

45ffd1c4403135eb9708b6bf8c2fe64115ad24bc628f911f1e7270bbd3526912
SHA512

a74ded2695b65df4a7c2bdd9229217a7f151c0947b41830beb7eb219b07ed9b0f299f3d5c2c6d01876815f9c3eab8771acbaf2f8b0d76ca0fbf97c37b878c68f
SSDEEP

1536:Crs9e1XvrsU6oGTtDyJDsObU7me0/ksENC/nO6zkL7RKrT2s4wHf0QVUxIhkZkeC:2s01jsroGg0WfS1KrT6tZIhkN3hfM

Score

N/A

Malware Config

Signatures

Files

45ffd1c4403135eb9708b6bf8c2fe64115ad24bc628f911f1e7270bbd3526912
.exe windows x86

3ba1d8922589f48340338df567a89d09

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ExtractAssociatedIconW
FindExecutableA
DragQueryPoint
DragQueryFileW
ShellAboutW

advapi32

RegEnumKeyExA
GetFileSecurityA
RegEnumValueW
GetSidIdentifierAuthority
StartServiceCtrlDispatcherW
LookupAccountNameA
GetSecurityDescriptorGroup
OpenThreadToken
SetKernelObjectSecurity
RegUnLoadKeyA

kernel32

GetModuleFileNameA
SetStdHandle
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetLastError
HeapFree
CreateFileW
CloseHandle
HeapAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
EncodePointer
DecodePointer
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteConsoleW
MultiByteToWideChar
Sleep
RtlUnwind
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
IsProcessorFeaturePresent
LoadLibraryW
GetStringTypeW
HeapReAlloc
GetConsoleCP
FlushFileBuffers
LCMapStringW
ReadFile
SetFilePointer

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ba1d8922589f48340338df567a89d09

Headers

DLL Characteristics

File Characteristics

Imports

shell32

advapi32

kernel32

Sections

.text Size: 52KB - Virtual size: 52KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 8KB - Virtual size: 113KB

.rsrc Size: 48KB - Virtual size: 47KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 52KB - Virtual size: 52KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 113KB

.rsrc
Size: 48KB - Virtual size: 47KB

.reloc
Size: 5KB - Virtual size: 5KB