09b96d30de286b87726516679c2b3ed2e325546592adb62419fa3f7c8ef59904

Sharing

Copy URL

Twitter E-mail

General

Target

09b96d30de286b87726516679c2b3ed2e325546592adb62419fa3f7c8ef59904
Size

62KB
MD5

1b10dd612789d925a45867b03d20933c
SHA1

a0ce0d7582cfccdf77eea512ccbc0fea61c8b90a
SHA256

09b96d30de286b87726516679c2b3ed2e325546592adb62419fa3f7c8ef59904
SHA512

9e1426f025b5f075a97daf6a1bc118d8f588e2f6e22276cb329c9a7b15c8a6d5d2396db2503f406612d851595e0cde22ee2f79b1e0fa50dfd13e2d76b413cdfc
SSDEEP

1536:9T5iMoF4QtkvQNWNhtaZRreI4F5QOzauE:d5iMoSQNNWNhtm34F5QOzfE

Score

N/A

Malware Config

Signatures

Files

09b96d30de286b87726516679c2b3ed2e325546592adb62419fa3f7c8ef59904
.exe windows x86

aa2f8fb4820699cb4d29cc9a00b7417a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
DragQueryFileA
DragQueryFileW

ole32

CoReleaseMarshalData
CoCreateInstance
CoTaskMemFree
IIDFromString
MkParseDisplayName
CoCreateFreeThreadedMarshaler
CoFreeUnusedLibraries
GetRunningObjectTable
OleRegGetUserType
StgOpenStorage
CoCreateGuid
OleSaveToStream
ReadClassStg
CreateOleAdviseHolder
ReleaseStgMedium
OleRegGetMiscStatus
CoTaskMemRealloc

msvcrt

rand
_amsg_exit
atol
time
__set_app_type
exit
_acmdln
wcschr
wcscspn
_XcptFilter
_except_handler3
__CxxFrameHandler
wcstol
wcsncmp
mbstowcs
_itow
_snprintf
sprintf
swprintf
memcpy
__wgetmainargs
_wfopen

kernel32

WriteConsoleW
InitializeCriticalSection
GetSystemDirectoryA
MapViewOfFile
CreateDirectoryW
ExitProcess
GlobalFree
ResetEvent
InterlockedDecrement
TlsGetValue
GetCurrentProcessId
GetCurrentThreadId
SetErrorMode
GetModuleHandleA
GetModuleFileNameW
MulDiv
SetEndOfFile
VirtualAlloc
GetFileSize
FindClose
GlobalUnlock
FindFirstFileA

version

VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeW
VerFindFileW
GetFileVersionInfoSizeA
GetFileVersionInfoA
GetFileVersionInfoW

shlwapi

PathAppendA
StrCatBuffW
PathIsUNCW
SHStrDupW
SHDeleteValueA
StrStrIW
PathFindFileNameA
AssocQueryStringW
StrCmpNW
PathIsRelativeW
PathFindExtensionW
wnsprintfA
PathCreateFromUrlW
UrlCanonicalizeW
PathAppendW
PathSkipRootW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aa2f8fb4820699cb4d29cc9a00b7417a

Headers

File Characteristics

Imports

shell32

ole32

msvcrt

kernel32

version

shlwapi

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 28KB - Virtual size: 28KB

.data Size: 24KB - Virtual size: 85KB

.reloc Size: 512B - Virtual size: 492B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 28KB - Virtual size: 28KB

.data
Size: 24KB - Virtual size: 85KB

.reloc
Size: 512B - Virtual size: 492B