003149BC90C87223ED2D0868147DCAA8[.]exe

Resubmissions

16-09-2022 21:25

220916-z9v4gacdhk 7

16-09-2022 21:17

220916-z5hbtagfd4 7

Sharing

Copy URL

Twitter E-mail

General

Target

003149BC90C87223ED2D0868147DCAA8.exe
Size

1.1MB
MD5

003149bc90c87223ed2d0868147dcaa8
SHA1

5a8dfc8733060699089fe7eb9cd663de5692e9ec
SHA256

a57be7e362ca9152d0541a8575f2aa223d9d585cff4171a14567421042cf108f
SHA512

dac60c6c770924c0396e213ce630a5ffd6b6cf6766b86950778e7e0dac0475bc5174a8d4c8a8e13cc5e7b01632f788b95dd8b19a5a6fbde08b15155a88d232fe
SSDEEP

24576:dRitTg+HmkyyD7nVmGxUYmiDHS23fUNeYHyf0zBiJUYeIu:3ATgL9ynnksURiz1PUNtH3ok

Score

N/A

Malware Config

Signatures

Files

003149BC90C87223ED2D0868147DCAA8.exe
.exe windows x86

d3513a8a3f16a56031e2057682aca680

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

GetUserNameA

comctl32

InitCommonControls

kernel32

CloseHandle
CreateFileA
DeleteCriticalSection
EnterCriticalSection
ExitThread
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FreeLibrary
GetComputerNameA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileInformationByHandle
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetShortPathNameW
GetStartupInfoA
GetSystemTimeAsFileTime
GetTempPathA
GetTickCount
GetVersionExA
InitializeCriticalSection
InterlockedCompareExchange
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryW
LoadResource
LockResource
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
SetEnvironmentVariableA
SetFileTime
SetLastError
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

_chmod
_dup2
_fileno
_getpid
_mkdir
_putenv
_rmdir
_strdup
_stricmp
_strnicmp
_unlink
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_environ
_errno
_exit
_fmode
_initterm
_iob
_lock
_onexit
_setjmp3
_stat
_unlock
abort
atoi
atol
calloc
exit
fclose
fflush
fgets
fopen
fprintf
fputc
fputs
fread
free
fwrite
getenv
localtime
malloc
memcmp
memcpy
memmove
memset
perror
raise
rand
signal
sprintf
srand
strcat
strchr
strcmp
strcpy
strlen
strncmp
strncpy
strrchr
strstr
time
toupper
vfprintf
vsprintf
wcscmp
wcslen

user32

MessageBoxA

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Resubmissions

Sharing

General

Malware Config

Signatures

Files

d3513a8a3f16a56031e2057682aca680

Headers

File Characteristics

Imports

advapi32

comctl32

kernel32

msvcrt

user32

Sections

.text Size: 66KB - Virtual size: 65KB

.data Size: 1024B - Virtual size: 676B

.rdata Size: 16KB - Virtual size: 15KB

.bss Size: - Virtual size: 1KB

.idata Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 1.0MB - Virtual size: 1.0MB

.text
Size: 66KB - Virtual size: 65KB

.data
Size: 1024B - Virtual size: 676B

.rdata
Size: 16KB - Virtual size: 15KB

.bss
Size: - Virtual size: 1KB

.idata
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 1.0MB - Virtual size: 1.0MB