8eddc47041d48f6f8fb9600bf2b35dc631e9df610e171e5fa263b353e6ac7de3

Sharing

Copy URL Twitter E-mail

General

Target

8eddc47041d48f6f8fb9600bf2b35dc631e9df610e171e5fa263b353e6ac7de3
Size

3.3MB
MD5

b179d2947013e68778057101eae48048
SHA1

5700a3d0eefd8968062e58a478eab4a7910affe4
SHA256

8eddc47041d48f6f8fb9600bf2b35dc631e9df610e171e5fa263b353e6ac7de3
SHA512

66cd47bb2b289f9507f34a545805e4250984e824f1fc020db847093046ae8c30ea59954432a58b46efa6bc1c73af6e7c29c6fc80f6b47696bbb014dba287776b
SSDEEP

49152:BkViK12OBe7meJl7kHyWG4JLucu9iKq3t15NG8QTk8WAtR2DUbWclVRFVlTrc37h:Bk7SJl7kHyLqLucRTN2k8b2jcTbfcr7

Score

N/A

Malware Config

Signatures

Files

8eddc47041d48f6f8fb9600bf2b35dc631e9df610e171e5fa263b353e6ac7de3
.exe windows x86

fc7a9d4fe8975d6c8b70afa4559f05d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

VariantInit

advapi32

FreeSid

user32

EnumWindows

kernel32

GetVersion
GetVersionExA
CompareStringW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

gdi32

GetStockObject

version

VerQueryValueA

ole32

CoCreateInstance

comctl32

ImageList_GetIconSize

urlmon

CoInternetCreateZoneManager

wininet

InternetSetOptionA

shell32

ExtractIconA

comdlg32

GetOpenFileNameA

crtdll

isprint

Sections

.text
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 25KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc7a9d4fe8975d6c8b70afa4559f05d0

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

ole32

comctl32

urlmon

wininet

shell32

comdlg32

crtdll

Sections

.text Size: - Virtual size: 1.2MB

.itext Size: - Virtual size: 4KB

.data Size: - Virtual size: 19KB

.bss Size: - Virtual size: 25KB

.idata Size: - Virtual size: 13KB

.tls Size: - Virtual size: 52B

.rdata Size: - Virtual size: 24B

.vmp0 Size: - Virtual size: 4.2MB

.vmp1 Size: 3.3MB - Virtual size: 3.3MB

.reloc Size: 512B - Virtual size: 108B

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: - Virtual size: 1.2MB

.itext
Size: - Virtual size: 4KB

.data
Size: - Virtual size: 19KB

.bss
Size: - Virtual size: 25KB

.idata
Size: - Virtual size: 13KB

.tls
Size: - Virtual size: 52B

.rdata
Size: - Virtual size: 24B

.vmp0
Size: - Virtual size: 4.2MB

.vmp1
Size: 3.3MB - Virtual size: 3.3MB

.reloc
Size: 512B - Virtual size: 108B

.rsrc
Size: 2KB - Virtual size: 2KB