29befb1864fd6873b1cd9e0c2b547a20b9e4d5198f08951f97e9a84c4f86dbe1

Sharing

Copy URL

Twitter E-mail

General

Target

29befb1864fd6873b1cd9e0c2b547a20b9e4d5198f08951f97e9a84c4f86dbe1
Size

1.3MB
MD5

c7a7941539deccd4b14bbb8f61ca36b3
SHA1

4d925d4c487c535dc3d8a19cb992265a63330f7e
SHA256

29befb1864fd6873b1cd9e0c2b547a20b9e4d5198f08951f97e9a84c4f86dbe1
SHA512

17634b364405dd1271c7343189494adfb475018d0744d979a713350da6d609305086345ea86c8c6759be5bd879c2dd365835959c2bdaaeb4a494cfb4b2e751e6
SSDEEP

24576:CljHMh5bhguzv5IvLiw8bxi9KRJ5SdjLPZwnAGoLB:Csh51gu1gLiH1RJ6fPwAGod

Score

1^/10

Malware Config

Signatures

Files

29befb1864fd6873b1cd9e0c2b547a20b9e4d5198f08951f97e9a84c4f86dbe1
.exe windows x86

6d2522b758339632c7bea9eba60fac9e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProcess
SizeofResource
GetExitCodeProcess
TerminateProcess
GetSystemDirectoryA
GetLastError
GetProcAddress
Process32Next
LockResource
GetModuleFileNameA
CreateToolhelp32Snapshot
CloseHandle
GetTempPathA
WriteFile
GetTickCount
InitializeCriticalSection
CreateFileW
WriteConsoleW
SetStdHandle
RtlUnwind
GetWindowsDirectoryA
WaitForSingleObject
Process32First
LoadResource
FindResourceA
CreateFileA
LoadLibraryW
HeapAlloc
HeapReAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
ExitProcess
GetStdHandle
GetModuleFileNameW
HeapCreate
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
IsProcessorFeaturePresent
Sleep
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
RaiseException
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
MultiByteToWideChar
GetStringTypeW
InterlockedExchange

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegCreateKeyA

shell32

ShellExecuteA

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d2522b758339632c7bea9eba60fac9e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shell32

Sections

.text Size: 55KB - Virtual size: 54KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 6KB - Virtual size: 15KB

.rsrc Size: 1.5MB - Virtual size: 1.5MB

.reloc Size: 17KB - Virtual size: 16KB

.text
Size: 55KB - Virtual size: 54KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 6KB - Virtual size: 15KB

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

.reloc
Size: 17KB - Virtual size: 16KB