0ce51d6b1fd9739ff6adce7cfc0210c6179cb30e1045a26eb1ffeff32825a2a3

Sharing

Copy URL Twitter E-mail

General

Target

0ce51d6b1fd9739ff6adce7cfc0210c6179cb30e1045a26eb1ffeff32825a2a3
Size

141KB
MD5

6713f6d891d971869a3b7bf4ea92acaf
SHA1

5a5676a9cd9246911792997b87281b42670076a5
SHA256

0ce51d6b1fd9739ff6adce7cfc0210c6179cb30e1045a26eb1ffeff32825a2a3
SHA512

6f361c620eb212c3ab2679715352a3ff3234af088c1f342a35ec98212c4ad28d5de2390042f21a9e216212c5e775174469e609201329bdda7c7762ec1b03e5ea
SSDEEP

3072:hIaWrpNX5+EQcchjxYyDDPkJpdtoNkWNU3wdevvt3r/x:maWrpNQEhujxYyDrkJMkWO35

Score

N/A

Malware Config

Signatures

Files

0ce51d6b1fd9739ff6adce7cfc0210c6179cb30e1045a26eb1ffeff32825a2a3
.exe windows x86

592a3458e61a6b61d4e8fddb245f5b2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetCommandLineA
GetComputerNameA
GetFileSize
GetFileTime
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTempPathA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
MoveFileA
ReadFile
SetFilePointer
Sleep
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
ExitProcess
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
HeapValidate
IsBadReadPtr
IsBadWritePtr
SetConsoleCtrlHandler
RtlUnwind
VirtualFree
HeapFree
FlushFileBuffers
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
SetHandleCount
GetEnvironmentStringsW
DeleteFileA
CreateThread
CreateMutexA
CreateFileA
CreateDirectoryA
lstrlenA
CloseHandle
GetVersion
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings

user32

UpdateWindow
TranslateMessage
ShowWindow
SetFocus
SendMessageA
RegisterClassExA
MsgWaitForMultipleObjects
MessageBoxA
LoadIconA
LoadCursorA
LoadBitmapA
GetWindowThreadProcessId
GetWindowTextA
GetMessageA
GetForegroundWindow
FindWindowA
EnableWindow
DispatchMessageA
DefWindowProcA
CreateWindowExA
CharUpperBuffA
CharUpperA
CharToOemA
CharLowerA
wsprintfA
PostQuitMessage

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetUserNameA

comctl32

ord17

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

592a3458e61a6b61d4e8fddb245f5b2d

Headers

File Characteristics

Imports

kernel32

user32

advapi32

comctl32

Sections

.text Size: 69KB - Virtual size: 68KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 18KB - Virtual size: 51KB

.rsrc Size: 46KB - Virtual size: 45KB

.text
Size: 69KB - Virtual size: 68KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 18KB - Virtual size: 51KB

.rsrc
Size: 46KB - Virtual size: 45KB