5327550ccd286b5a9fdfea23fa6aa744d5033aa69d29b9fc4baa6d1e3bebcdb2

Sharing

Copy URL Twitter E-mail

General

Target

5327550ccd286b5a9fdfea23fa6aa744d5033aa69d29b9fc4baa6d1e3bebcdb2
Size

73KB
MD5

6c2a18d21c24ae9baaba81edfb775d95
SHA1

f0c448fb22d7be7714a9a2b2d92d71c3cd159a8a
SHA256

5327550ccd286b5a9fdfea23fa6aa744d5033aa69d29b9fc4baa6d1e3bebcdb2
SHA512

d0caa23a7380ebf0fedf4b5c391ddd2b1967cf19acb672ffd644c4379a17f72b613577ea8e4c792770325e0206d05ca3e4bafd3c1de849fb8a2f0d5bb80e9798
SSDEEP

1536:6hqfwErgkJUqHQZVVUNYLBVHQZVVUNPW2sUECey:6QfvdbHeVVfBVHeVV4ETy

Score

N/A

Malware Config

Signatures

Files

5327550ccd286b5a9fdfea23fa6aa744d5033aa69d29b9fc4baa6d1e3bebcdb2
.exe windows x86

09edb245867f28b00c2e1117a1a6caa8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynW
GetCommandLineW
VerSetConditionMask
VerifyVersionInfoW
WriteConsoleW
SetLastError
FreeLibrary
GetConsoleOutputCP
lstrlenW
GetLocaleInfoW
SetStdHandle
SetFilePointer
IsValidCodePage
IsValidLocale
GetUserDefaultLCID
GetLocaleInfoA
VirtualProtect
GetStringTypeW
GetStringTypeA
FlushFileBuffers
RtlUnwind
VirtualAlloc
GetCPInfo
GetACP
LCMapStringW
Sleep
MultiByteToWideChar
VirtualFree
HeapCreate
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
FindNextFileW
GetVersionExA
GetCommandLineA
LocalFree
LocalReAlloc
LocalAlloc
GetModuleHandleA
GetModuleHandleW
CreateThread
WaitForMultipleObjects
GlobalFree
OpenEventW
WaitForSingleObject
CloseHandle
QueryPerformanceCounter
GetSystemInfo
InitializeCriticalSection
GetLastError
InterlockedExchange
TlsSetValue
InterlockedCompareExchange
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
HeapValidate
HeapSize
HeapWalk
HeapUnlock
HeapCompact
HeapFree
HeapReAlloc
HeapAlloc
DisableThreadLibraryCalls
TlsAlloc
GetProcessHeap
TlsFree
FindFirstFileW
GetModuleFileNameA
RemoveDirectoryW

user32

ExitWindowsEx
LoadStringW

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueW

msvcrt

strncmp
exit
fwprintf
mbstowcs
vfwprintf
malloc
fprintf
fgetwc
_getch
vswprintf

shlwapi

wvnsprintfW

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

09edb245867f28b00c2e1117a1a6caa8

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

shlwapi

Sections

.text Size: 17KB - Virtual size: 16KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 21KB - Virtual size: 2.1MB

.rsrc Size: 15KB - Virtual size: 14KB

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 21KB - Virtual size: 2.1MB

.rsrc
Size: 15KB - Virtual size: 14KB