2f3c67e365a80a07c59ac3b0b418a5e13054c90e8c539e39cebf52bb8809a341

Sharing

Copy URL Twitter E-mail

General

Target

2f3c67e365a80a07c59ac3b0b418a5e13054c90e8c539e39cebf52bb8809a341
Size

538KB
MD5

6b0f5c5136991163879c9e1d22767b90
SHA1

873d062caea644f41159f32d5b35a80a4cec9c80
SHA256

2f3c67e365a80a07c59ac3b0b418a5e13054c90e8c539e39cebf52bb8809a341
SHA512

a54fe6e77df8fe4042464feb388cd7f5e4e9151de61235f1a5b4359abede81f337069527ca238b5ff3742e736a03af0407ac6b2fa004c45057b5de2e2405b9fd
SSDEEP

12288:aL0jkCEznxubzzaRS93kRC1LbuuP1zTgQCnVShiqXN:q0jInxubXaRS93FLbdzTg7SoyN

Score

N/A

Malware Config

Signatures

Files

2f3c67e365a80a07c59ac3b0b418a5e13054c90e8c539e39cebf52bb8809a341
.exe windows x86

b95d65680829fbdea28f6b321cb58b37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetModuleHandleA
GlobalAddAtomA
GlobalGetAtomNameA
GlobalUnlock
GlobalLock
CreateEventA
DeleteFileA
WriteFile
CreateFileA
WaitForSingleObject
SetEvent
CreateMutexA
GetWindowsDirectoryA
MapViewOfFile
CreateFileMappingA
ReadFile
SetFilePointer
Sleep
CopyFileA
GetFileAttributesA
UnmapViewOfFile
lstrcpynA
CreateDirectoryA
GetLastError
CloseHandle
GetStartupInfoA
CreateProcessA
lstrcpyA
lstrcatA
lstrlenA
GetSystemDirectoryA
IsBadWritePtr
GetStringTypeA
IsBadCodePtr
GetModuleFileNameA
GetACP
GetCPInfo
IsBadReadPtr
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
LoadLibraryA
GetProcAddress
GetStringTypeW
HeapFree
HeapAlloc
RtlUnwind
GetCommandLineA
GetVersion
TerminateProcess
VirtualAlloc
GetOEMCP
HeapDestroy
HeapCreate
VirtualFree
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
ExitProcess

user32

MessageBoxA
DispatchMessageA
TranslateMessage
GetMessageA
IsWindow
CreateWindowExA
RegisterClassA
wsprintfA
UnregisterClassA
DestroyWindow
SetWindowLongA
GetWindowLongA
DefWindowProcA
SendMessageA
PostMessageA

advapi32

RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b95d65680829fbdea28f6b321cb58b37

Headers

File Characteristics

Imports

kernel32

user32

advapi32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 11KB - Virtual size: 11KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 11KB - Virtual size: 11KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB