f2b556aa4c5b2ad7a1b1c866c6b01903eb3a451ff30b9be02270b85498aadba0

Sharing

Copy URL Twitter E-mail

General

Target

f2b556aa4c5b2ad7a1b1c866c6b01903eb3a451ff30b9be02270b85498aadba0
Size

112KB
MD5

13106c1a3fb4fe7a3c3bb5a078f9e525
SHA1

99c466f0919ed0170cb1493a1d25d6cd3245251e
SHA256

f2b556aa4c5b2ad7a1b1c866c6b01903eb3a451ff30b9be02270b85498aadba0
SHA512

ced27433c7dd88ba0b3055fdfc579b3e95029bcd39cae9d44e5095a3f763e76d84d67bb72180c6809e475ace3ed39843a7f22fe40e4131bda2f2642021106e2a
SSDEEP

1536:8IBCQX4t3j5M4Eo5bVHb5adWjfE9yUOaylZHFh37d3MP9KYtNfQAgw/a+lEHikIm:HBCcoLbVHVawjrd69Z6Agw/a+SmDKF

Score

N/A

Malware Config

Signatures

Files

f2b556aa4c5b2ad7a1b1c866c6b01903eb3a451ff30b9be02270b85498aadba0
.exe windows x86

0a3e7079887d283a624da0059ea794a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

uniansi

RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
PostThreadMessageW
RegCreateKeyExW
RegEnumValueW
DispatchMessageW
lstrcpynW
CharNextW
CreateEventW
lstrlenW
PeekMessageW
wsprintfW
LoadStringW
lstrcpyW
LoadLibraryW
RegDeleteValueW
CreateMutexW
lstrcatW
FindWindowW
FormatMessageW
CompareStringW
RegDeleteKeyW
GetShortPathNameW
GetModuleFileNameW
LoadLibraryExW
lstrcmpiW

kernel32

EnterCriticalSection
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStartupInfoA
InterlockedExchange
LeaveCriticalSection
HeapFree
GetProcessHeap
HeapAlloc
SetLastError
GetUserDefaultLangID
WideCharToMultiByte
InterlockedIncrement
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
FreeLibrary
MultiByteToWideChar
lstrlenA
SizeofResource
LoadResource
FindResourceW
GetLastError
SetEvent
InterlockedDecrement
CloseHandle
WaitForSingleObject
CreateThread
Sleep
GetCurrentThreadId
GetCommandLineW

ole32

CoRevokeClassObject
CoRegisterClassObject
CoInitialize
CoCreateInstance
CoTaskMemRealloc
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree

oleaut32

RegisterTypeLi
LoadTypeLi
VarUI4FromStr
SysFreeString
SysAllocString

comctl32

InitCommonControlsEx

msvcrt

__p__commode
__dllonexit
_except_handler3
__setusermatherr
_initterm
_adjust_fdiv
_acmdln
exit
__getmainargs
_exit
memcmp
_XcptFilter
memcpy
realloc
memset
_onexit
__p__fmode
__set_app_type
malloc
free
_controlfp

advapi32

RegCloseKey

gdi32

DeleteObject

user32

MsgWaitForMultipleObjects
MessageBoxW
TranslateMessage
ShowWindow
BringWindowToTop
SetForegroundWindow

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0a3e7079887d283a624da0059ea794a5

Headers

File Characteristics

Imports

uniansi

kernel32

ole32

oleaut32

comctl32

msvcrt

advapi32

gdi32

user32

Sections

.text Size: 23KB - Virtual size: 23KB

.data Size: 6KB - Virtual size: 7KB

.rsrc Size: 5KB - Virtual size: 4KB

.mdata Size: 76KB - Virtual size: 76KB

.text
Size: 23KB - Virtual size: 23KB

.data
Size: 6KB - Virtual size: 7KB

.rsrc
Size: 5KB - Virtual size: 4KB

.mdata
Size: 76KB - Virtual size: 76KB