a179a49579525f0531426283ac43dd1c930be07c696de3421768f1d6809fba48

Sharing

Copy URL Twitter E-mail

General

Target

a179a49579525f0531426283ac43dd1c930be07c696de3421768f1d6809fba48
Size

48KB
MD5

23266a2374cb31298ce9c5334046fe94
SHA1

2a3fe629a3859b62c6ba87a470a3ed6b21bbccea
SHA256

a179a49579525f0531426283ac43dd1c930be07c696de3421768f1d6809fba48
SHA512

5dc5bd8c4c2a3845844941b74416aae538aced3c690956d559a8f7134a26463fc6a4a8b4c45f84d97044e47968a43fa29ca650da2ace746c8015a2b4aa75877d
SSDEEP

768:OEel3WY4rz+hpqq8l6HOfGApdWt5tdQFow:n4uKIl6LeQt5tdQaw

Score

N/A

Malware Config

Signatures

Files

a179a49579525f0531426283ac43dd1c930be07c696de3421768f1d6809fba48
.exe windows x86

da346598af729945ff9a9d49e1c62a5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathStripPathA
StrStrA

kernel32

CloseHandle
GetLastError
CreateMutexA
GetVersionExA
CreateThread
CreateEventA
WaitForSingleObject
SetEvent
UnmapViewOfFile
WaitForMultipleObjects
MapViewOfFile
CreateFileMappingA
lstrcmpiA
lstrcmpA
GetCurrentProcessId
Sleep
OutputDebugStringA
Process32Next
Process32First
CreateToolhelp32Snapshot
OpenProcess
LoadLibraryA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FreeLibrary
GetProcAddress
TerminateProcess
GetCurrentProcess
lstrlenA
FlushFileBuffers
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter

user32

RegisterRawInputDevices
GetRawInputData
GetAsyncKeyState
GetKeyState
PostMessageA
SendMessageA
SendMessageTimeoutA
SendNotifyMessageA
SendInput
AttachThreadInput
PostQuitMessage
DestroyWindow
DefWindowProcA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA

gdi32

GetStockObject

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da346598af729945ff9a9d49e1c62a5d

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

advapi32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 8KB - Virtual size: 5KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 8KB - Virtual size: 5KB