3a4599f624d057f83893cc966b56a91990628bb990e92fd46852bbe5a6279684

Sharing

Copy URL

Twitter E-mail

General

Target

3a4599f624d057f83893cc966b56a91990628bb990e92fd46852bbe5a6279684
Size

124KB
MD5

6fa192e4e2346044ad3d54346076295c
SHA1

86dfeb8b190a46c7232f063d7f266cbecb6c2a40
SHA256

3a4599f624d057f83893cc966b56a91990628bb990e92fd46852bbe5a6279684
SHA512

926be150b7ff7181e745d656a010798af9f8a832f155571039ef240317955dbdfbe6911ee44d38967e95336ec398b4dca8eb7f96f74ba55aba13815f185f9a9f
SSDEEP

3072:s1g1YjvZoqbkI3/gOouVJWJUdLCdvjzKWGwfwcehv7fwE5:s1JN7gGWMG46fjehDj

Score

N/A

Malware Config

Signatures

Files

3a4599f624d057f83893cc966b56a91990628bb990e92fd46852bbe5a6279684
.exe windows x86

f0e2fa9310815d33e18c63397b854ec7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GetTempPathA
GetWindowsDirectoryA
FindClose
FindFirstFileA
CreateDirectoryA
GetModuleFileNameA
GetProcAddress
GetCPInfo
GetACP
LCMapStringW
LoadLibraryA
SetStdHandle
SetFilePointer
SetEndOfFile
GetStringTypeA
ReadFile
GetStringTypeW
IsBadCodePtr
SetEnvironmentVariableA
RtlUnwind
GetCurrentDirectoryA
GetLastError
SetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
DeleteFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
OutputDebugStringA
HeapFree
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
IsBadReadPtr
FreeEnvironmentStringsW
GetOEMCP
CloseHandle
GetFileAttributesA
GetFileType
CreateFileA
GetCurrentProcessId
HeapReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
HeapCreate
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
VirtualFree
WriteFile
FlushFileBuffers
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter

user32

MessageBoxA
RegisterClassA
CreateWindowExA
GetSystemMetrics
DefWindowProcA

comdlg32

GetOpenFileNameA

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA

shell32

FindExecutableA

ole32

CoCreateGuid

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f0e2fa9310815d33e18c63397b854ec7

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 75KB

.rsrc Size: 68KB - Virtual size: 68KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 75KB

.rsrc
Size: 68KB - Virtual size: 68KB