07cb4dc202502a1e3fc8b96abbe40ad58f45dc10390133f8967a582766c077d8

Sharing

Copy URL Twitter E-mail

General

Target

07cb4dc202502a1e3fc8b96abbe40ad58f45dc10390133f8967a582766c077d8
Size

140KB
MD5

254239531d7852af3f8a8f53aab56adf
SHA1

2a3b7ad96648300f849c702eb6cf0ddb62d947c3
SHA256

07cb4dc202502a1e3fc8b96abbe40ad58f45dc10390133f8967a582766c077d8
SHA512

341ab7a0b06bd148c83bab8352816dd7abbcae938f56d128efeee7522d9b379796acb06169cbb685e6c7cee19f1867c0a9d0ca98c7704c98c967f1c215a520d1
SSDEEP

3072:/8bzNDoGp5KUwNcy4XYg90/Eo1V8zlWlesN:/8bpDoNU6w5Y310lyes

Score

N/A

Malware Config

Signatures

Files

07cb4dc202502a1e3fc8b96abbe40ad58f45dc10390133f8967a582766c077d8
.exe windows x86

1669860346bad05e6502cb23b69616d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cmelv

?RunElevated@@YAHPAUHWND__@@PB_W11@Z
?IsWow64@@YAHXZ
?GetElevationType@@YAJPAW4_TOKEN_ELEVATION_TYPE@@@Z
?RunNonElevated@@YAHPAUHWND__@@PB_W11@Z
?IsVista@@YAHXZ
?IsElevated@@YAJPAH@Z

user32

MessageBoxW
PostMessageW

shell32

ShellExecuteW

comctl32

ord345

kernel32

FlushFileBuffers
CloseHandle
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
Sleep
VirtualAlloc
HeapReAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LoadLibraryA
InitializeCriticalSection
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
CreateFileA

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1669860346bad05e6502cb23b69616d3

Headers

File Characteristics

Imports

cmelv

user32

shell32

comctl32

kernel32

Sections

.text Size: 40KB - Virtual size: 36KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 80KB - Virtual size: 80KB

.text
Size: 40KB - Virtual size: 36KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 80KB - Virtual size: 80KB