940e56f01115bfa9de85b729ea77f953a9b43294a64c2e834f07d8328ae789ba

Sharing

Copy URL Twitter E-mail

General

Target

940e56f01115bfa9de85b729ea77f953a9b43294a64c2e834f07d8328ae789ba
Size

624KB
MD5

6c3a1370e357bf04d67f29da0eeb0e60
SHA1

a24273bc02f2bdd1440f4ca9243efd6955c6205b
SHA256

940e56f01115bfa9de85b729ea77f953a9b43294a64c2e834f07d8328ae789ba
SHA512

474c749f49473eef766a452b5032b0da164e2ede0ddd9dd2902de5a6472199168fd1c012c3a036b6283fc5729c717dc06a9d6fa373726af05662637cf50b70bb
SSDEEP

12288:0mcBQFzIU7UPkkDJvyFS3e6sXfWalA8MWe1p2EUQ9AEXZzo:HcBQFsUwPT8FS3EP1lA8B/IJM

Score

N/A

Malware Config

Signatures

Files

940e56f01115bfa9de85b729ea77f953a9b43294a64c2e834f07d8328ae789ba
.exe windows x86

5a460ea2afec5bf75fa7bfed82c9e7ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
lstrcpyA
lstrcmpiA
CreateMutexA
LocalFree
Sleep
WideCharToMultiByte
GetCommandLineW
lstrcatW
lstrcpyW
MultiByteToWideChar
lstrcmpA
lstrlenA
GetLastError
OutputDebugStringA
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
RtlUnwind
InitializeCriticalSection
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
HeapSize
VirtualAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LoadLibraryA

user32

wsprintfA

advapi32

RegQueryValueExA
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA

shell32

SHGetFolderPathA
CommandLineToArgvW

ole32

CoInitialize
CoUninitialize
FreePropVariantArray
CoCreateInstance

oleaut32

SysFreeString
SysAllocString

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 500KB - Virtual size: 1.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5a460ea2afec5bf75fa7bfed82c9e7ba

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 48KB - Virtual size: 45KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 52KB - Virtual size: 48KB

.vmp0 Size: 500KB - Virtual size: 1.6MB

.text
Size: 48KB - Virtual size: 45KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 52KB - Virtual size: 48KB

.vmp0
Size: 500KB - Virtual size: 1.6MB