f74678e421d9d73937ae1bc9715d74d263ea05dd618757a55bb84447dcbfcf9b

Sharing

Copy URL Twitter E-mail

General

Target

f74678e421d9d73937ae1bc9715d74d263ea05dd618757a55bb84447dcbfcf9b
Size

156KB
MD5

504c6412579939d7774bbc115cdc59f0
SHA1

215d05afc9d985841e2ce35757d8e0c9e70914e7
SHA256

f74678e421d9d73937ae1bc9715d74d263ea05dd618757a55bb84447dcbfcf9b
SHA512

fe90f3e4d90d551355e625561caa5b8206606662b1bb8615d7fde363658c2f898da5dd16684c6ef908682ab1f75f737ec9b238543d6fa2b76df7efbd45b82f3f
SSDEEP

3072:hzIbLvJPt42y4iplDtG7eNiyfHDugGHf3k0i:QfNy4+1w4JHLGcV

Score

N/A

Malware Config

Signatures

Files

f74678e421d9d73937ae1bc9715d74d263ea05dd618757a55bb84447dcbfcf9b
.exe windows x86

08596a44cd4b6d57476d015f9817561a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
ExitProcess
WriteFile
SetFilePointer
GetCurrentProcessId
GetCurrentThreadId
GetCommandLineW
GlobalFree
InterlockedExchange
VirtualQuery
VirtualProtect
GetSystemInfo
SetStdHandle
GetLocaleInfoW
FlushFileBuffers
Sleep
GetStartupInfoA
ExitThread
WaitForSingleObject
GetACP
lstrcatW
MulDiv
_lclose
CreateFileW
GetCurrentThread
LoadLibraryA
GetProcAddress
GetOEMCP
GetStartupInfoW
VirtualAlloc

user32

LoadIconA

advapi32

RegQueryValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyW
RegDeleteValueW
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegOpenKeyA

Sections

.text
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata3
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

08596a44cd4b6d57476d015f9817561a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 147KB - Virtual size: 146KB

.rdata4 Size: 1KB - Virtual size: 1KB

.rdata3 Size: 1KB - Virtual size: 1KB

.rdata2 Size: 1KB - Virtual size: 1KB

.rdata Size: 1024B - Virtual size: 516B

.data Size: 1KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 384B

.reloc Size: 512B - Virtual size: 200KB

.text
Size: 147KB - Virtual size: 146KB

.rdata4
Size: 1KB - Virtual size: 1KB

.rdata3
Size: 1KB - Virtual size: 1KB

.rdata2
Size: 1KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 516B

.data
Size: 1KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 384B

.reloc
Size: 512B - Virtual size: 200KB