6fb1bf85bb098edb6d98e1288437dfa8846b8c50a8e54e9099fa2bd677f12137

Sharing

Copy URL Twitter E-mail

General

Target

6fb1bf85bb098edb6d98e1288437dfa8846b8c50a8e54e9099fa2bd677f12137
Size

122KB
MD5

48967a43d4898e4c1d31237d981195e1
SHA1

c702bd5724c81a87a895a5500143081e5c97476f
SHA256

6fb1bf85bb098edb6d98e1288437dfa8846b8c50a8e54e9099fa2bd677f12137
SHA512

ba6fe0d6b2a4e050d25a948f5176e26308deb981a409950b03d051d37c2e169915bc59f129c338cc963673933582fa0781aa2944f2283ddd2884f75afaa0f427
SSDEEP

3072:m+QLFWo+pmny/lKWh0KYR//tuST0fVhoNxYHt5qwNkvWF:mbFV+pmn2EWqBR/0fVyNxrvWF

Score

N/A

Malware Config

Signatures

Files

6fb1bf85bb098edb6d98e1288437dfa8846b8c50a8e54e9099fa2bd677f12137
.exe windows x86

9a270604dfaf1fe8d2c9e5bcbf9ac62e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
LoadLibraryW
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
lstrlenW
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
GlobalUnlock
GlobalLock
LeaveCriticalSection
EnterCriticalSection
InterlockedCompareExchange
lstrcpynW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
CloseHandle
InitializeCriticalSection
Sleep
GetCurrentThreadId
CreateThread
CreateEventW
SetEvent
GetCommandLineW
GetSystemDirectoryW
LoadLibraryA
RaiseException
GetVersionExW
LocalAlloc
GetVersionExA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersion
GetFileAttributesW
GetModuleHandleA
GetProcAddress
GetModuleHandleW
WaitForSingleObject

user32

PeekMessageW
CharNextW
SendMessageW
SetParent
ShowWindow
CharUpperW
DispatchMessageW
TranslateMessage
CreateWindowExW
DefWindowProcW
EnableWindow
RegisterClassExW
PostThreadMessageW
GetMessageW

advapi32

RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegSetValueExW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
GetHGlobalFromStream
CreateStreamOnHGlobal
CoUninitialize
CoInitializeEx
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
StringFromGUID2
CoCreateInstance

msvcrt

__wgetmainargs
_controlfp
??1type_info@@UAE@XZ
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
memset
_amsg_exit
_wcmdln
_except_handler3
free
malloc
_CxxThrowException
wcslen
__CxxFrameHandler
realloc
_c_exit
_exit
_XcptFilter
_cexit
exit

shlwapi

PathFindExtensionW

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9a270604dfaf1fe8d2c9e5bcbf9ac62e

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

msvcrt

shlwapi

Sections

.text Size: 32KB - Virtual size: 32KB

.data Size: 512B - Virtual size: 844B

.rsrc Size: 81KB - Virtual size: 84KB

.text
Size: 32KB - Virtual size: 32KB

.data
Size: 512B - Virtual size: 844B

.rsrc
Size: 81KB - Virtual size: 84KB