abd36a742a20ee831eb5ca987430f948dd1e38a8aab2b62e6339231f5fc520e9

Sharing

Copy URL Twitter E-mail

General

Target

abd36a742a20ee831eb5ca987430f948dd1e38a8aab2b62e6339231f5fc520e9
Size

275KB
MD5

63230ba62dcf23658fa9985f42cacb30
SHA1

0f968be5e88a1cb9a064c59867264c117d293381
SHA256

abd36a742a20ee831eb5ca987430f948dd1e38a8aab2b62e6339231f5fc520e9
SHA512

39766cd3add20d27537784b0c62963c0562f1801c54b2db37c2464d29c0f490e052318ee4fe81750149ebcbd6c3e2f7e96df80d45e3aa78cc0356e5c2e07ee84
SSDEEP

3072:1aM74bUOTAjzX7rOHkLcYML4vv1Npzb2xwD8q1JFFGAXfUCXHSRc7ueK:s44b7czaELLMEHdW08qvFsRc70

Score

N/A

Malware Config

Signatures

Files

abd36a742a20ee831eb5ca987430f948dd1e38a8aab2b62e6339231f5fc520e9
.exe windows x86

cf886b7e83e18f556c257c4578312b9a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetSystemTime
CreateThread
WaitForMultipleObjects
SetEvent
GetProcessHeap
HeapFree
GetUserDefaultLCID
RaiseException
InterlockedDecrement
InterlockedIncrement
CloseHandle
LoadResource
LockResource
GetThreadLocale
FreeLibrary
GetSystemInfo
QueryDosDeviceW
QueryDosDeviceA
lstrlenA
GetSystemDirectoryW
GetSystemDirectoryA
UnmapViewOfFile
GetDriveTypeA
GetDateFormatW
CreateMutexW
CreateMutexA
CompareStringW
GetShortPathNameA
GetWindowsDirectoryW
GlobalLock
GlobalSize
GlobalAlloc
GlobalUnlock
GlobalFree
GetLocaleInfoA
CreateFileMappingW
CreateFileMappingA
GetVersionExW
SetFileAttributesW
SetFileAttributesA
IsBadWritePtr
lstrcmpiW
lstrcmpiA
LoadLibraryExW
LoadLibraryExA
LoadLibraryW
LoadLibraryA
LCMapStringW
LCMapStringA
GetVolumeInformationW
GetTempPathA
GetTempFileNameW
GetTempFileNameA
GetPrivateProfileStringW
GetPrivateProfileStringA
lstrcpynW
GetModuleHandleW
GetModuleFileNameW
GetModuleFileNameA
SystemTimeToFileTime
GetLocalTime
MapViewOfFile
GetFileType
SetFilePointer
SetEndOfFile
GetFileSize
ReadFile
WriteFile
FlushFileBuffers
WaitForSingleObject
CompareFileTime
SetThreadPriority
Sleep
GetLongPathNameA
GetLongPathNameW
ReleaseMutex
InterlockedExchange
GetStartupInfoW
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
FindClose
IsValidLocale
SetErrorMode
FileTimeToSystemTime
lstrcatA
lstrcpyA
GetACP
DebugBreak
InterlockedCompareExchange
GetExitCodeThread
DeviceIoControl
GetVersion
HeapAlloc
GetDriveTypeW
GetDateFormatA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
lstrlenW
GetLastError
GetWindowsDirectoryA
GetProcAddress
SetLastError
CopyFileA
CopyFileW
CompareStringA
CreateDirectoryA
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileA
CreateFileW
DeleteFileA
DeleteFileW
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindResourceA
FindResourceW
LocalFree
LocalAlloc
GetFileAttributesA
GetFileAttributesW
GetFileAttributesExA
GetFileAttributesExW
GetFullPathNameA
GetFullPathNameW
GetStartupInfoA
GetCommandLineA
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
VirtualAlloc
GetCurrentThread
GetOEMCP

user32

BeginPaint
GetClientRect
EndPaint
PostQuitMessage
DefWindowProcA
LoadCursorA

gdi32

PlayEnhMetaFile
DeleteEnhMetaFile

advapi32

RegOpenKeyW

Sections

.text
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cf886b7e83e18f556c257c4578312b9a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 207KB - Virtual size: 207KB

.rdata Size: 59KB - Virtual size: 58KB

.data Size: 5KB - Virtual size: 6KB

.rsrc Size: 1024B - Virtual size: 576B

.reloc Size: 1024B - Virtual size: 76KB

.text
Size: 207KB - Virtual size: 207KB

.rdata
Size: 59KB - Virtual size: 58KB

.data
Size: 5KB - Virtual size: 6KB

.rsrc
Size: 1024B - Virtual size: 576B

.reloc
Size: 1024B - Virtual size: 76KB