77f45b143ed15c3ff755ccb0c83d540442abd21374a93650569fdd270e3f80cc

Sharing

Copy URL

Twitter E-mail

General

Target

77f45b143ed15c3ff755ccb0c83d540442abd21374a93650569fdd270e3f80cc
Size

435KB
MD5

387050f87fe3ff8dbedf3c097233a710
SHA1

3d060c5c5065e44652a59d405ff4754bc88ba426
SHA256

77f45b143ed15c3ff755ccb0c83d540442abd21374a93650569fdd270e3f80cc
SHA512

645af124b2fcfed670c00ec9ab2a53964077936c32d1df5091310eca9075dc955465257f8b23358792c031e3348a453e7b6a4f3b31d175a4d9e4b98bc785cb56
SSDEEP

3072:TSWVa1rLfhE9vDH8/Wg1kuWZyxOvxQggjbdRYEX+RotB5:fVa1rLhAeKuWZyxOqXjGsL

Score

N/A

Malware Config

Signatures

Files

77f45b143ed15c3ff755ccb0c83d540442abd21374a93650569fdd270e3f80cc
.exe windows x86

76b6b15e89dab616759ab250aa200fff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
ExpandEnvironmentStringsW
GetLastError
GetModuleHandleW
CreateFileW
GetFileAttributesW
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
GetVersionExW
CreateDirectoryW
FindNextFileW
FindFirstFileW
FindClose
LoadLibraryExW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetFileAttributesExW
SetFilePointer
GetComputerNameW
GetFileSizeEx
LoadLibraryA
ReadFile
OpenProcess
DeleteFileW
SetFileAttributesW
GetFullPathNameW
lstrlenW
GetTempFileNameW
lstrcatW
lstrcpyW
lstrcmpiW
GetPrivateProfileStringW
CloseHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
FreeLibrary
GetSystemDefaultLangID
GetModuleFileNameW
GetProcAddress

user32

MessageBoxW
LoadStringW

advapi32

GetUserNameW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW

ole32

CoTaskMemFree
OleInitialize
OleUninitialize

msvcr80

_crt_debugger_hook
_decode_pointer
_onexit
_lock
__dllonexit
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
memset
?terminate@@YAXXZ
_unlock
memcpy
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_invalid_parameter_noinfo
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
memcpy_s
??0exception@std@@QAE@ABV01@@Z
??3@YAXPAX@Z
wcslen
strlen
memmove_s
??2@YAPAXI@Z
wcsrchr
_stricmp
_splitpath_s
??_V@YAXPAX@Z
wcsncpy
wcsstr
wcschr
towlower
towupper
wcscpy_s
_wcsicmp
wcsncmp
free
malloc
_CxxThrowException
__CxxFrameHandler3
_amsg_exit
__wgetmainargs
_cexit

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

76b6b15e89dab616759ab250aa200fff

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

msvcr80

version

Sections

.text Size: 51KB - Virtual size: 50KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 2KB

.rsrc Size: 364KB - Virtual size: 363KB

.text
Size: 51KB - Virtual size: 50KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 2KB

.rsrc
Size: 364KB - Virtual size: 363KB