c1abf48d2120d8ba91f091248edcad3c8cbf6af6ffc7cb2ebcfcd7f458e28451

Sharing

Copy URL Twitter E-mail

General

Target

c1abf48d2120d8ba91f091248edcad3c8cbf6af6ffc7cb2ebcfcd7f458e28451
Size

516KB
MD5

7245cada91258526f00c827438b12ed2
SHA1

8713a9cefcdbb36b4f58da018ebdf19601131aa3
SHA256

c1abf48d2120d8ba91f091248edcad3c8cbf6af6ffc7cb2ebcfcd7f458e28451
SHA512

7deb9022f602d79ba6cc71cc1858a851bc2205276386bed1a7db2a11946cec11ed80621b9e6d762db6d923e1b8c5a66e076968ae203046fa8449bda7a4a671a0
SSDEEP

12288:WMr1wOZH7w1C2WBZkegXb7IZTMTlpMURI5jv53d+Z5r6B:dhwEH7H2WBXQMURIlcJ6B

Score

N/A

Malware Config

Signatures

Files

c1abf48d2120d8ba91f091248edcad3c8cbf6af6ffc7cb2ebcfcd7f458e28451
.exe windows x86

4bc537de466abe12eb6ed7f9bf4ecbd3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointerEx
WriteFile
FindClose
FindFirstFileW
FreeLibrary
GetProcAddress
LoadLibraryW
InterlockedDecrement
InterlockedIncrement
GetCurrentProcess
GetVolumeInformationW
CreateThread
GetFileAttributesW
GetFullPathNameW
SetVolumeMountPointW
GetVolumeNameForVolumeMountPointW
DefineDosDeviceW
GetLogicalDrives
Sleep
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
SetFileTime
GetFileSize
GetFileTime
SetFileAttributesW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
DeleteFileW
ReadFile
CopyFileW
LoadResource
LockResource
FindResourceW
SetStdHandle
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
FlushFileBuffers
GetEnvironmentStrings
FreeEnvironmentStringsW
GetTickCount
GetVersionExW
CreateFileW
GetLastError
DeviceIoControl
CloseHandle
GetLogicalDriveStringsW
GetDriveTypeW
FormatMessageW
LocalFree
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
GetTempPathW
OutputDebugStringW
RtlUnwind
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy

user32

PostMessageW
EndDialog
MoveWindow
GetWindowTextW
SetWindowTextW
EnableWindow
GetWindowRect
SystemParametersInfoW
SetFocus
GetSystemMenu
AppendMenuW
GetDlgItem
SendMessageW
LoadStringW
MessageBoxW
FindWindowW
SetForegroundWindow
DialogBoxParamW

advapi32

EqualSid
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
RegCloseKey
FreeSid
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc

ole32

CoInitializeEx
CoUninitialize

comctl32

InitCommonControlsEx

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SharedD
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 352KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wrdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4bc537de466abe12eb6ed7f9bf4ecbd3

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

comctl32

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 20KB - Virtual size: 28KB

.SharedD Size: 4KB - Virtual size: 4B

.rsrc Size: 352KB - Virtual size: 348KB

.wrdata Size: 80KB - Virtual size: 80KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 20KB - Virtual size: 28KB

.SharedD
Size: 4KB - Virtual size: 4B

.rsrc
Size: 352KB - Virtual size: 348KB

.wrdata
Size: 80KB - Virtual size: 80KB