1c3b12077f0efff876b75e8992b32c4b18f05f18b035f8d6b90d5232227faa08

General

Target

1c3b12077f0efff876b75e8992b32c4b18f05f18b035f8d6b90d5232227faa08
Size

92KB
MD5

786e5220c1b42a41421e381abb0252c0
SHA1

80f48b3be692d029799447be0ef2d9b108291fa1
SHA256

1c3b12077f0efff876b75e8992b32c4b18f05f18b035f8d6b90d5232227faa08
SHA512

8a712096c888e731d996f15b29193033d39f803d7b23cd887106e7262281f25d8a59d2a4b71038e92faaea0a125a8fdd8ac4ba904aa9cae9a0a376ffd2c388e0
SSDEEP

1536:15/sO99KnPIlPQCxk3Mauz4OOOOOOOOOOOOOOOOOOOufy4nXxb9l:1rIPIlYC+3Huz4OOOOOOOOOOOOOOOOOm

Score

N/A

Malware Config

Signatures

Files

1c3b12077f0efff876b75e8992b32c4b18f05f18b035f8d6b90d5232227faa08
.exe windows x86

45745bee697dbbf99dfb8411c313ec78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetDriveTypeA
GetLogicalDriveStringsA
MoveFileExA
GetFileAttributesA
GetWindowsDirectoryA
GetCommandLineW
ReadFile
GetFileSize
SetFileAttributesA
GetLastError
LocalAlloc
DeleteFileA
LocalFree
GetModuleFileNameA
FindFirstFileA
FindNextFileA
FindClose
CreateFileA
WriteFile
WinExec
CloseHandle
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
RaiseException

advapi32

CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
OpenSCManagerA
EnumServicesStatusA
OpenServiceA
QueryServiceConfigA
DeleteService
CloseServiceHandle
CryptAcquireContextA

shell32

CommandLineToArgvW

shlwapi

SHGetValueA
SHSetValueA
SHDeleteValueA
StrStrIA
PathFileExistsA

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

45745bee697dbbf99dfb8411c313ec78

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

shlwapi

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 48KB - Virtual size: 51KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 48KB - Virtual size: 51KB