2af8bf43ef4e4062a0cb5fe039453c4d4804af29d156890b9528c643078e6cd0

Sharing

Copy URL Twitter E-mail

General

Target

2af8bf43ef4e4062a0cb5fe039453c4d4804af29d156890b9528c643078e6cd0
Size

183KB
MD5

4a965ba138ea894a1579e9e8e0c54ca0
SHA1

e3d267397aa25988dd04952f372132a9cb941a37
SHA256

2af8bf43ef4e4062a0cb5fe039453c4d4804af29d156890b9528c643078e6cd0
SHA512

6626ddf186566b06c751e3df0cb70aaacadb2416c6aea8bb5cbecb0f4f440ece9c2967e34c305084e5d57f40615374361aa1fe0304f956ffd249499680a59134
SSDEEP

1536:OoLVzAU/6XnzJXXn5hTUh0fkx1XxVEt6c2Il7cPySXsNmKLX+2LJyN:Oo1glXXc0fk7Hc6cKt8F+2LJE

Score

N/A

Malware Config

Signatures

Files

2af8bf43ef4e4062a0cb5fe039453c4d4804af29d156890b9528c643078e6cd0
.exe windows x86

2ed336bbe7a5ff9f9059b21259af21d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualAlloc
GetVersionExA
IsBadReadPtr
GetCommandLineW
VirtualAllocEx
GetACP
GetModuleHandleA
LoadLibraryExA
ExitProcess
ExitThread
GetProcAddress
GlobalAlloc
GetLastError

gdi32

RestoreDC
CreateBitmap
CreatePalette
CreateCompatibleBitmap

shell32

SHGetFolderPathA
SHGetFileInfoA
SHGetDiskFreeSpaceA
SHGetDesktopFolder

advapi32

RegDeleteValueA

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES00
Size: 1024B - Virtual size: 767B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES39
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES96
Size: 1024B - Virtual size: 658B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES52
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES27
Size: 1024B - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES99
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES68
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES46
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ed336bbe7a5ff9f9059b21259af21d9

Headers

File Characteristics

Imports

kernel32

gdi32

shell32

advapi32

Sections

.text Size: 18KB - Virtual size: 18KB

.data Size: 148KB - Virtual size: 148KB

RES00 Size: 1024B - Virtual size: 767B

RES39 Size: 2KB - Virtual size: 1KB

RES96 Size: 1024B - Virtual size: 658B

RES52 Size: 1KB - Virtual size: 1KB

RES27 Size: 1024B - Virtual size: 870B

RES99 Size: 2KB - Virtual size: 1KB

RES68 Size: 2KB - Virtual size: 1KB

RES46 Size: 2KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 18KB - Virtual size: 18KB

.data
Size: 148KB - Virtual size: 148KB

RES00
Size: 1024B - Virtual size: 767B

RES39
Size: 2KB - Virtual size: 1KB

RES96
Size: 1024B - Virtual size: 658B

RES52
Size: 1KB - Virtual size: 1KB

RES27
Size: 1024B - Virtual size: 870B

RES99
Size: 2KB - Virtual size: 1KB

RES68
Size: 2KB - Virtual size: 1KB

RES46
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB