25f340064b496efcccb95f2b56f65e65f5b10d7b089f99a1c590024ce82da999

General

Target

25f340064b496efcccb95f2b56f65e65f5b10d7b089f99a1c590024ce82da999
Size

407KB
MD5

4746296ba1d281598589158544c6a860
SHA1

eb7559588deea5f529a291578c707d6fcb5f9622
SHA256

25f340064b496efcccb95f2b56f65e65f5b10d7b089f99a1c590024ce82da999
SHA512

c1f791708d4586a298e5c6c008fbbeb11db2b3cbd92c1e82a39753ba257ea253ddf0631bf9221104f22de5b05585da75ad95e6ec1b4a6afd0782e53a7ba3ca3d
SSDEEP

12288:A/XsrnZYR1TK46rhLttkQykChTXJpNgXGn62A:6qj46eVkChTy66T

Score

N/A

Malware Config

Signatures

Files

25f340064b496efcccb95f2b56f65e65f5b10d7b089f99a1c590024ce82da999
.exe windows x86

15124f8d7cd05aa33d07f850ac110d65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
GetCurrentThread
MultiByteToWideChar
WriteConsoleOutputCharacterA
RtlUnwind
CopyFileA
UnhandledExceptionFilter
GetCurrentProcess
GetProcAddress
VirtualAlloc
GetThreadContext
ReadConsoleOutputA
HeapReAlloc
HeapAlloc
ResetEvent
SetThreadContext
HeapFree
InterlockedExchange
GetModuleFileNameA
TerminateProcess
GetModuleHandleA
ExitProcess
VirtualQueryEx
GetProfileSectionA
GetLocalTime
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
UnlockFile
SetThreadPriority
GetSystemDefaultLCID
QueryPerformanceCounter
lstrcpyW
GetTimeFormatA
SetLocalTime
VirtualQuery
GetCurrentThreadId

wininet

ReadUrlCacheEntryStream
HttpSendRequestExW
InternetSetDialStateA
InternetCombineUrlA
FtpCommandW
InternetDial
FindFirstUrlCacheContainerA
FtpDeleteFileW
InternetOpenA
InternetSetOptionExW
InternetAlgIdToStringA
UnlockUrlCacheEntryFileA
InternetGetConnectedStateExA
CreateUrlCacheGroup
FreeUrlCacheSpaceA
InternetTimeToSystemTime
UrlZonesDetach
FindNextUrlCacheGroup
InternetFortezzaCommand
CreateUrlCacheContainerW
UpdateUrlCacheContentPath
HttpQueryInfoW
GopherFindFirstFileA

shell32

DuplicateIcon
SHGetSpecialFolderPathW
DragQueryFileA
SHGetFileInfoW
ExtractIconExW
SHGetNewLinkInfo
DragQueryPoint
SheGetDirA
ShellAboutA
SHGetDataFromIDListA
ExtractAssociatedIconExA
RealShellExecuteW
ShellHookProc
SHAppBarMessage
DragQueryFile
ExtractIconExA
FindExecutableW
RealShellExecuteExW
ExtractAssociatedIconExW
ShellExecuteEx
SheChangeDirA
SHBrowseForFolderA

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15124f8d7cd05aa33d07f850ac110d65

Headers

File Characteristics

Imports

kernel32

wininet

shell32

Sections

.text Size: 136KB - Virtual size: 136KB

.data Size: 266KB - Virtual size: 266KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 136KB - Virtual size: 136KB

.data
Size: 266KB - Virtual size: 266KB

.rsrc
Size: 3KB - Virtual size: 2KB