15f594320f19f61ed309de72f7c63333837f770ac02709ad0795ffd31fadba7f

General

Target

15f594320f19f61ed309de72f7c63333837f770ac02709ad0795ffd31fadba7f
Size

596KB
MD5

f5c28c67eb6849dd114feb1a590c1390
SHA1

525f7892501503109202b3c8b78bfcb8e536e4e1
SHA256

15f594320f19f61ed309de72f7c63333837f770ac02709ad0795ffd31fadba7f
SHA512

f1f66bd393b53d44f07330f55e5dbb85f8f984233d2efec81fd0c083a43b3bc992b111202514fb7af5f6efa614febd81175b77f283f910c84678cbfeb535300c
SSDEEP

12288:bCZKQEMbBrHF3t+yOgCA3j3gQkJiLev4Ck:GZDEMb33t5T3yim4P

Score

N/A

Malware Config

Signatures

Files

15f594320f19f61ed309de72f7c63333837f770ac02709ad0795ffd31fadba7f
.dll windows x86

9f1d7e3d6f861c0d68b60f290cf02585

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryInfoKeyW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW

shell32

ShellExecuteW
SHGetSpecialFolderLocation
DragAcceptFiles
SHAddToRecentDocs

kernel32

GetCurrentProcessId
MultiByteToWideChar
GetModuleFileNameW
EnterCriticalSection
GetModuleHandleA
CreateFileW
WideCharToMultiByte
WaitForSingleObject
ReadFile
GetVersionExA
GetModuleHandleW
GetCurrentThreadId
SetUnhandledExceptionFilter
VirtualAlloc
QueryPerformanceCounter
UnhandledExceptionFilter
InitializeCriticalSection
LocalFree
GetDateFormatA
InterlockedIncrement
InterlockedDecrement
GetTickCount
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
FreeLibrary
RaiseException
InterlockedExchange
SetEvent
CloseHandle
GetLastError

Exports

Exports

Fetch
GetMin
Long_FromVoidPtr
PendingDeprecationWarning
get_copyright
get_hIST
process_data

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f1d7e3d6f861c0d68b60f290cf02585

Headers

File Characteristics

Imports

advapi32

shell32

kernel32

Exports

Exports

Sections

.text Size: 184KB - Virtual size: 183KB

.rdata Size: 84KB - Virtual size: 82KB

.data Size: 112KB - Virtual size: 112KB

.rsrc Size: 204KB - Virtual size: 202KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 184KB - Virtual size: 183KB

.rdata
Size: 84KB - Virtual size: 82KB

.data
Size: 112KB - Virtual size: 112KB

.rsrc
Size: 204KB - Virtual size: 202KB

.reloc
Size: 8KB - Virtual size: 7KB