cf8ffd70dccea759fcdfdaa2212e69d350476071d70c036cb8e37b9b817c488e

Sharing

Copy URL Twitter E-mail

General

Target

cf8ffd70dccea759fcdfdaa2212e69d350476071d70c036cb8e37b9b817c488e
Size

180KB
MD5

632cc5df05d3bfc83bbb32e7a5586b2c
SHA1

a28de39ce996054e5d037bb7c5a4a876d0ef9794
SHA256

cf8ffd70dccea759fcdfdaa2212e69d350476071d70c036cb8e37b9b817c488e
SHA512

adffc33f88535a844915a0983c06d4334517bf595becb3502d932aa82a52e80b5e75e45e631d0304ec372f3da433cd3c50eced1cfb2b8e025cee26ff00a2b467
SSDEEP

3072:MbH+BCS0UPrxlKuUR5IrqqZ63drafA45YC5v:MbUC3ge5Ftra4j6

Score

N/A

Malware Config

Signatures

Files

cf8ffd70dccea759fcdfdaa2212e69d350476071d70c036cb8e37b9b817c488e
.exe windows x86

4bc537de466abe12eb6ed7f9bf4ecbd3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointerEx
WriteFile
FindClose
FindFirstFileW
FreeLibrary
GetProcAddress
LoadLibraryW
InterlockedDecrement
InterlockedIncrement
GetCurrentProcess
GetVolumeInformationW
CreateThread
GetFileAttributesW
GetFullPathNameW
SetVolumeMountPointW
GetVolumeNameForVolumeMountPointW
DefineDosDeviceW
GetLogicalDrives
Sleep
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
SetFileTime
GetFileSize
GetFileTime
SetFileAttributesW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
DeleteFileW
ReadFile
CopyFileW
LoadResource
LockResource
FindResourceW
SetStdHandle
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
FlushFileBuffers
GetEnvironmentStrings
FreeEnvironmentStringsW
GetTickCount
GetVersionExW
CreateFileW
GetLastError
DeviceIoControl
CloseHandle
GetLogicalDriveStringsW
GetDriveTypeW
FormatMessageW
LocalFree
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
GetTempPathW
OutputDebugStringW
RtlUnwind
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy

user32

PostMessageW
EndDialog
MoveWindow
GetWindowTextW
SetWindowTextW
EnableWindow
GetWindowRect
SystemParametersInfoW
SetFocus
GetSystemMenu
AppendMenuW
GetDlgItem
SendMessageW
LoadStringW
MessageBoxW
FindWindowW
SetForegroundWindow
DialogBoxParamW

advapi32

EqualSid
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
RegCloseKey
FreeSid
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc

ole32

CoInitializeEx
CoUninitialize

comctl32

InitCommonControlsEx

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SharedD
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

R^�
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4bc537de466abe12eb6ed7f9bf4ecbd3

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

comctl32

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 20KB - Virtual size: 28KB

.SharedD Size: 4KB - Virtual size: 4B

.rsrc Size: 8KB - Virtual size: 8KB

R^� Size: 88KB - Virtual size: 88KB

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 20KB - Virtual size: 28KB

.SharedD
Size: 4KB - Virtual size: 4B

.rsrc
Size: 8KB - Virtual size: 8KB

R^�
Size: 88KB - Virtual size: 88KB