00cdd65084a39cacbb97ba07642583bdd3e9d6e139f365e192d86948f2596c8c

Sharing

Copy URL Twitter E-mail

General

Target

00cdd65084a39cacbb97ba07642583bdd3e9d6e139f365e192d86948f2596c8c
Size

256KB
MD5

672e9ea43497c93703c9fac48040e870
SHA1

8b5747e67561a9142b5ce77ae6d74021842cf647
SHA256

00cdd65084a39cacbb97ba07642583bdd3e9d6e139f365e192d86948f2596c8c
SHA512

bc53ed39a72c91ccf232ecf1c76175be298c87cd316dfa5530f5bacc08f94d36c6bc52b92589e1fe0395ca6aaed899b66e79ca0b145717c1ed8a4601d2c43e3d
SSDEEP

6144:EV5EGAxjGtyjHW1EPUHYuwe/S2JiXnGQhbQLVz:E3EpGtmHWicHYuzJi8Vz

Score

N/A

Malware Config

Signatures

Files

00cdd65084a39cacbb97ba07642583bdd3e9d6e139f365e192d86948f2596c8c
.exe windows x86

e2efaa4371133cfc94fb102e6de0ce67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
lstrcatA
GetCurrentProcess
SetPriorityClass
WriteFile
SetEndOfFile
SetFilePointer
ReadFile
CreateFileA
HeapFree
CloseHandle
lstrlenA
GetVersionExA
SetEnvironmentVariableA
GetLocaleInfoW
LoadLibraryA
GetCurrentThread
SetThreadPriority
SetLastError
GetSystemTime
GetLastError
HeapAlloc
GetSystemDirectoryA
GetOEMCP
GetWindowsDirectoryA
UnhandledExceptionFilter
FreeEnvironmentStringsA
SetStdHandle
IsBadCodePtr
GetACP
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
TerminateProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
FlushFileBuffers
SetUnhandledExceptionFilter
HeapSize
VirtualAlloc
IsBadWritePtr
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoA
GetStringTypeW
IsBadReadPtr
GetProcAddress
GetTimeZoneInformation
GetStringTypeA

user32

wsprintfA

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegCloseKey

shell32

ShellExecuteExA
SHChangeNotify

Sections

.text
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

loGA
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e2efaa4371133cfc94fb102e6de0ce67

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 124KB - Virtual size: 121KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 20KB - Virtual size: 23KB

.rsrc Size: 4KB - Virtual size: 904B

loGA Size: 84KB - Virtual size: 84KB

.text
Size: 124KB - Virtual size: 121KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 20KB - Virtual size: 23KB

.rsrc
Size: 4KB - Virtual size: 904B

loGA
Size: 84KB - Virtual size: 84KB