4d1fd74193432c65a5a4262e8a4e89c7fdfbdd21970159a56abf8bbfa5dab68c

Sharing

Copy URL

Twitter E-mail

General

Target

4d1fd74193432c65a5a4262e8a4e89c7fdfbdd21970159a56abf8bbfa5dab68c
Size

67KB
MD5

c291d8d8da9d44437bd8e5616a00a62b
SHA1

ba8d804f925259a2dc29811333fc61ea7c57f25b
SHA256

4d1fd74193432c65a5a4262e8a4e89c7fdfbdd21970159a56abf8bbfa5dab68c
SHA512

43fb911b07bef0539703f4f588df2c26bda7c8bac36a8a5e6e36e174204208feef9944762ecd46f1814ab6cdc816603f50876513c1b88eb9b9bcfd05af90fea3
SSDEEP

768:+Nt3A3M/z/z5yvGyfUG5f02p/7DNtoL5ehRNS1oFKBM4kRu+AeDIdFZj9TjFCQQC:g3AczqZPNtodXmBQjTJCNigP0jot4EBk

Score

N/A

Malware Config

Signatures

Files

4d1fd74193432c65a5a4262e8a4e89c7fdfbdd21970159a56abf8bbfa5dab68c
.exe windows x86

6f9df042a8a9b3a72c7ce0ce9fec0760

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
GetCurrentProcess
HeapFree
VirtualFree
GetProcessHeap
IsBadReadPtr
GetWindowsDirectoryA
WriteFile
GetVolumeInformationA
CreateProcessA
ReadFile
GetModuleFileNameW
GetSystemDirectoryA
MultiByteToWideChar
InterlockedIncrement
FindFirstFileA
GetLastError
GetProcAddress
VirtualAlloc
FindClose
LoadLibraryA
FindNextFileA
GetModuleHandleA
CreateMutexA
VirtualProtect
CloseHandle
DeleteFileA
CreateProcessW
HeapAlloc
FreeLibrary
SetFilePointer
GetFileSize
CreateFileA
HeapReAlloc
GetComputerNameA
CreateDirectoryA
ExitProcess

urlmon

CreateURLMoniker
CoInternetGetSession
RegisterBindStatusCallback
CreateAsyncBindCtx
URLDownloadToCacheFileA

comctl32

ord17

user32

CreateWindowExA
GetWindowLongA
MessageBoxA
SetWindowLongA
TranslateMessage
GetClientRect
DefWindowProcA
PostQuitMessage
RegisterClassExA
GetMessageA
DestroyWindow
DispatchMessageW
ShowWindow
GetSystemMetrics
LoadIconA
UpdateWindow

advapi32

RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc

ole32

CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
OleSetContainedObject
CoInitialize
OleCreate

oleaut32

SysFreeString
SysAllocString

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f9df042a8a9b3a72c7ce0ce9fec0760

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

urlmon

comctl32

user32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 6KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 448B

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 6KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 448B