0ac96e48ca63b7b348d014687b94850cc98f5bec893fb741fc2eaad8a20eba07

Sharing

Copy URL Twitter E-mail

General

Target

0ac96e48ca63b7b348d014687b94850cc98f5bec893fb741fc2eaad8a20eba07
Size

83KB
MD5

678c938b3c7471b6351958e691dd9704
SHA1

d1a5f937bd68b1fb5906dea967293c0f3b8288ee
SHA256

0ac96e48ca63b7b348d014687b94850cc98f5bec893fb741fc2eaad8a20eba07
SHA512

ed4613f1053a8c710eceb3d6cf63c74aee45e5c62f444023a7902fad6add5fd469291510a2acfc71d71c9f01119fb3a729fa22ff79ab396134e9d598515e2e59
SSDEEP

1536:9tA+8ciNT+rd+J3lp3Sdc+IbL3tAk1/c+ksvK0bI92Z5lrS1mY98:9tA+8cxx+Bl7+IdtB7kMKs82Z5I18

Score

N/A

Malware Config

Signatures

Files

0ac96e48ca63b7b348d014687b94850cc98f5bec893fb741fc2eaad8a20eba07
.exe windows x86

85e67fec29b651022d56aac0765bcff3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

user32

GetKeyboardType
DestroyWindow
MessageBoxA
CharNextA

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetCurrentThreadId
VirtualQuery
GetStartupInfoA
GetModuleFileNameA
GetLastError
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
WriteProcessMemory
VirtualProtectEx
VirtualAllocEx
SetThreadContext
ResumeThread
ReadProcessMemory
GetThreadContext
FreeLibrary
CreateProcessA
CloseHandle

ntdll

NtUnmapViewOfSection

Sections

.
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rDaTa
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

85e67fec29b651022d56aac0765bcff3

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

ntdll

Sections

. Size: 16KB - Virtual size: 16KB

. Size: 512B - Virtual size: 420B

. Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 9KB

. Size: 1KB - Virtual size: 1KB

.tls Size: - Virtual size: 8B

.rDaTa Size: 512B - Virtual size: 32B

.reloc Size: 1024B - Virtual size: 912B

. Size: 512B - Virtual size: 512B

.
Size: 16KB - Virtual size: 16KB

.
Size: 512B - Virtual size: 420B

.
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 9KB

.
Size: 1KB - Virtual size: 1KB

.tls
Size: - Virtual size: 8B

.rDaTa
Size: 512B - Virtual size: 32B

.reloc
Size: 1024B - Virtual size: 912B

.
Size: 512B - Virtual size: 512B