7ab23c046301f48f74932a4b9030a0b1adbbb67d5261121eeae37806fd1a334a

Sharing

Copy URL Twitter E-mail

General

Target

7ab23c046301f48f74932a4b9030a0b1adbbb67d5261121eeae37806fd1a334a
Size

171KB
MD5

69ecca3d5a7525c424369f78bde52ff1
SHA1

eed83244185ef6e9df211e98d1e6275ed8b35d8e
SHA256

7ab23c046301f48f74932a4b9030a0b1adbbb67d5261121eeae37806fd1a334a
SHA512

e1279b14c974a308e960a11baf7a6ead1558092359a39e8a33f9b9f96b576f6c3c3dac8028334655180c9eb27caf086296d4c99e945f8a69bdb22fb43ea0ea16
SSDEEP

3072:UC82i86psbU0vrreHZAzIWswpHh7tiuLaNc5uoQ1fWXx9AHgtqO1L:UCFiVsbtzXd2wOc5uooWX/SO1L

Score

N/A

Malware Config

Signatures

Files

7ab23c046301f48f74932a4b9030a0b1adbbb67d5261121eeae37806fd1a334a
.exe windows x86

f3fad95e43c8f6135132a6405c88bc02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

GetFileAttributesW
GetFullPathNameW
Sleep
FindResourceW
CreateProcessW
CreateDirectoryW
SizeofResource
CreateFileW
LockResource
WriteFile
MoveFileExW
GetFileSize
SetFilePointer
FindResourceExW
SetEndOfFile
CloseHandle
GetLastError
CopyFileW
DeleteFileW
GetTickCount
CreateFileA
WriteConsoleW
MoveFileW
CompareStringA
CompareStringW
SetEnvironmentVariableA
LoadResource
SetUnhandledExceptionFilter
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
ExitProcess
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WideCharToMultiByte
GetTimeZoneInformation
GetStdHandle
GetModuleFileNameA
LoadLibraryA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
VirtualAlloc
RtlUnwind
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers

user32

GetDesktopWindow
UnregisterClassA

advapi32

RegCreateKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW

shell32

SHCreateDirectoryExW
SHFileOperationW
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderLocation

shlwapi

PathFileExistsW

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f3fad95e43c8f6135132a6405c88bc02

Headers

File Characteristics

Imports

version

kernel32

user32

advapi32

shell32

shlwapi

Sections

.text Size: 63KB - Virtual size: 62KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 81KB - Virtual size: 84KB

.text
Size: 63KB - Virtual size: 62KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 81KB - Virtual size: 84KB