e93caabe96aa87c077c51369013c5adbb4a40dd9ca33d95b8c07fd950738836e

Sharing

Copy URL Twitter E-mail

General

Target

e93caabe96aa87c077c51369013c5adbb4a40dd9ca33d95b8c07fd950738836e
Size

259KB
MD5

6cb7133ac7541b36f78cf1ef83e83f60
SHA1

f8a3a01172285d4a0c080eda387aa4d9777c9f9a
SHA256

e93caabe96aa87c077c51369013c5adbb4a40dd9ca33d95b8c07fd950738836e
SHA512

acc81472e536f29703423b7197e5e813da2aeaeb887104a5e584d92720139adaa89cc7c00f3f17f5c506b9a622a379642923d871e2037f249c917d19581391eb
SSDEEP

6144:r904u58InfRYuriDb2lzsxi/CJbumYYL/bDklv1PnZ:hWtfKuriDb2TKdIcTDklv1PZ

Score

N/A

Malware Config

Signatures

Files

e93caabe96aa87c077c51369013c5adbb4a40dd9ca33d95b8c07fd950738836e
.exe windows x86

a5328e33e016cfc12b2e018287d8651e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
LoadLibraryW
LeaveCriticalSection
MapViewOfFile
LCMapStringW
GetFileAttributesA
CompareStringW
GlobalAlloc
QueryPerformanceCounter
GetSystemDefaultLangID
HeapCreate
OpenSemaphoreA
UnmapViewOfFile
WriteFile
FindNextFileA
CreateMutexA
GetCPInfo
OutputDebugStringA
GetCurrentProcessId
VirtualFree
GetEnvironmentStringsW
FindFirstFileA
GetOEMCP
WaitForMultipleObjects
GetUserDefaultLangID
GetModuleFileNameA
GetDiskFreeSpaceA
GetFileSize
OpenFileMappingA
RemoveDirectoryA
GetProcAddress
GetExitCodeThread
OpenEventA
CreateThread
CreateFileA
ExpandEnvironmentStringsA
CreateSemaphoreA
SetEndOfFile
SetFilePointer
ReadFileEx
CreateDirectoryA
GetModuleHandleW
CloseHandle
ReadFile
GetUserDefaultLCID
CreateEventA
GetEnvironmentStringsA
GetTickCount
InterlockedDecrement
SetThreadPriority
OpenMutexA
WriteFileEx
ReleaseMutex
GlobalFree
GetLastError
EnterCriticalSection
InterlockedIncrement
GlobalFindAtomW
lstrlenA
GetSystemInfo
ReleaseSemaphore
FreeLibrary
SetLastError
SetEvent
lstrcmpA
FindClose
WaitForSingleObjectEx
DeleteCriticalSection
WaitForSingleObject
lstrcpyA

msvcrt

isprint
_iob
strncmp
_stricmp
_makepath
fprintf
printf
fclose
vprintf
fopen
memmove
_strupr
wcslen
strncpy
toupper
_fullpath
rand
fflush
_splitpath
_itoa
_strnicmp
sprintf

advapi32

RegQueryValueExA
RegisterEventSourceA
AllocateAndInitializeSid
DeregisterEventSource
RegSetValueExA
SetSecurityDescriptorDacl
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
FreeSid
RegOpenKeyExA
InitializeAcl
GetLengthSid
RegDeleteValueA
ReportEventA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 241KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a5328e33e016cfc12b2e018287d8651e

Headers

File Characteristics

Imports

kernel32

msvcrt

advapi32

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 2KB

.rsrc Size: 241KB - Virtual size: 241KB

.reloc Size: 512B - Virtual size: 284B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 241KB - Virtual size: 241KB

.reloc
Size: 512B - Virtual size: 284B