ada399d7923adeb8b6f408e8de1a222c5ad90ed00269bda462e58d32f3dde8fd

Sharing

Copy URL Twitter E-mail

General

Target

ada399d7923adeb8b6f408e8de1a222c5ad90ed00269bda462e58d32f3dde8fd
Size

104KB
MD5

0864eede4136a1aeb1c4c892250a9ea0
SHA1

c63cf48067ee7ec0a65728cea1c3ed93fdccd887
SHA256

ada399d7923adeb8b6f408e8de1a222c5ad90ed00269bda462e58d32f3dde8fd
SHA512

34d6ceaaa113a79cc303c5f48e06a4396e50ef88c2d8c4ba2a64667d5bcd06149ef985f7e394495cfe85ec35cb11f30aa66fb46fb42d093d2376826ff3cedf1c
SSDEEP

1536:X3+v9Mt1RPTgX/pTJgJ6ZooVoiVjzuAD8GXN+I7fJ+aCl1feS:X3+v15JgJ6ZooVoiVjNzoI7h+aS1GS

Score

N/A

Malware Config

Signatures

Files

ada399d7923adeb8b6f408e8de1a222c5ad90ed00269bda462e58d32f3dde8fd
.exe windows x86

7e6f9664381eceaf4446fbbe625778a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

ResetEvent
GetExitCodeProcess
CreateProcessA
GetVersionExA
SetLastError
FormatMessageA
SetEvent
GetCurrentProcess
GetCurrentThread
FreeResource
LockResource
LoadResource
CloseHandle
WriteFile
SizeofResource
CreateFileA
DeleteFileA
GetCurrentThreadId
CreateThread
WaitForSingleObject
GetTempPathA
CreateEventA
GetModuleFileNameA
GetModuleHandleA
GetLastError
FindResourceA
GetPrivateProfileStringA
LeaveCriticalSection
EnterCriticalSection
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
InterlockedDecrement
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
GetVersion
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
GetCPInfo
SetFilePointer
InterlockedIncrement
RtlUnwind
TlsSetValue
TlsAlloc
TlsGetValue
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType

user32

LoadStringA
MessageBoxA
ExitWindowsEx
UnregisterClassA
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
CreateDialogParamA
RegisterClassExA
SetWindowLongA
SetWindowTextA
LoadCursorA
SetCursor
GetClassInfoExA
PostThreadMessageA

advapi32

AdjustTokenPrivileges
GetTokenInformation
OpenThreadToken
OpenProcessToken
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
FreeSid
EqualSid
AllocateAndInitializeSid
LookupPrivilegeValueA

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e6f9664381eceaf4446fbbe625778a7

Headers

File Characteristics

Imports

version

kernel32

user32

advapi32

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 19KB

.rsrc Size: 44KB - Virtual size: 43KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 19KB

.rsrc
Size: 44KB - Virtual size: 43KB