f79d212fcdcc9a6128074308179470ba07ce212621277f4f86e222903b8f0734

Sharing

Copy URL Twitter E-mail

General

Target

f79d212fcdcc9a6128074308179470ba07ce212621277f4f86e222903b8f0734
Size

175KB
MD5

3cbc30d1c2758ed7d4cbd9686bcb82a0
SHA1

82a1097d4720dbe438fd04a75bab9fe514b1d569
SHA256

f79d212fcdcc9a6128074308179470ba07ce212621277f4f86e222903b8f0734
SHA512

3011ffd18f9e15f85dbd91c7cbd4bb1d1bca8607973112e6d5deaf34d3ba585db62383351cf0e6632180217d64811752df23a9af5a32d8c6d83114906bd76adf
SSDEEP

3072:cJWYAsJJLGd9wJs63OF37JLtuh8DhFc/qsohs6+oQo9JZLFX4x+I0YrvjI8:iPJS2yC61FHPhmo9X490+vjI8

Score

N/A

Malware Config

Signatures

Files

f79d212fcdcc9a6128074308179470ba07ce212621277f4f86e222903b8f0734
.exe windows x86

36b3f9a6b1c5a6bf936487bd17689bec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerInstallFileA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

GetModuleHandleA
lstrlenA
RemoveDirectoryA
DeleteFileA
GetTempPathA
FindResourceA
SetErrorMode
LeaveCriticalSection
CloseHandle
CreateThread
CreateMutexA
WaitForSingleObject
ReleaseMutex
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetEvent
InterlockedDecrement
CreateEventA
GetPrivateProfileStringA
OpenEventA
CreateProcessA
GetCurrentThreadId
QueryPerformanceFrequency
CreateFileA
SetFilePointer
GetFileSize
HeapAlloc
GetSystemInfo
HeapCreate
FreeLibrary
GetProcAddress
Sleep
LockResource
GetSystemDefaultLangID
MoveFileA
CreateDirectoryA
FindResourceExA
WriteFile
lstrcpyA
LoadResource
CreateFileMappingA
SizeofResource
WritePrivateProfileStringA
GetShortPathNameA
lstrcmpiA
HeapDestroy
lstrcatA
GetTickCount
GetFileAttributesA
GetTempFileNameA
GetStartupInfoA
ExitProcess
GetCommandLineA
DebugBreak
HeapReAlloc
HeapFree
FindClose
VirtualQuery
VirtualProtect
FindFirstFileA
SearchPathA
GetWindowsDirectoryA
lstrcpynA
ResetEvent
QueryPerformanceCounter
SystemTimeToFileTime
GlobalAlloc
GetCurrentProcess
GetCurrentThread
GetVersion
IsBadReadPtr
GlobalLock
GlobalUnlock
GetVersionExA
CompareStringW
CompareStringA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
GetLastError
SetLastError
GetModuleFileNameA
UnmapViewOfFile
GlobalFree
MapViewOfFile
LoadLibraryA
ReadFile
lstrcmpA

user32

PostThreadMessageA
CharUpperA
PeekMessageA
MsgWaitForMultipleObjects
GetDesktopWindow
CreateDialogIndirectParamA
LoadStringA
CharNextA
CharLowerBuffA
GetWindowTextA
SetTimer
TranslateMessage
GetMessageA
SetActiveWindow
ShowWindow
EndDialog
SetWindowTextA
GetDlgItem
SendMessageA
SetDlgItemTextA
wsprintfA
LoadIconA
DestroyWindow
SystemParametersInfoA
SetWindowPos
CharLowerA
IsDialogMessageA
ReleaseDC
DispatchMessageA
GetDC
KillTimer
ScreenToClient
MoveWindow
SetWindowRgn
DialogBoxIndirectParamA
GetWindowRect

gdi32

GetObjectA
GetTextExtentPoint32A
LPtoDP
CreateFontIndirectA
DeleteObject

advapi32

RegSetValueExA
OpenThreadToken
OpenProcessToken
GetTokenInformation
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
AllocateAndInitializeSid
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyA
RegQueryValueA
FreeSid
EqualSid

ole32

CoRevokeClassObject
CoCreateInstance
CoCreateGuid
CoRegisterClassObject
CoTaskMemFree
StringFromCLSID
CoReleaseMarshalData
CoInitialize
CoGetInterfaceAndReleaseStream
CoUninitialize
StringFromGUID2
GetRunningObjectTable
CoTaskMemAlloc
CoMarshalInterThreadInterfaceInStream

oleaut32

SysAllocStringLen
SysStringLen
SysFreeString
VariantCopy
VariantClear
SysAllocString
LoadTypeLi
RegisterTypeLi
LoadRegTypeLi

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

36b3f9a6b1c5a6bf936487bd17689bec

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Sections

.text Size: 50KB - Virtual size: 49KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 110KB - Virtual size: 112KB

.text
Size: 50KB - Virtual size: 49KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 110KB - Virtual size: 112KB