cf0ef36dd1fe62470b624d2ff55dbf286fdcb0fccc2c7342c5bf251532b175ab

Sharing

Copy URL Twitter E-mail

General

Target

cf0ef36dd1fe62470b624d2ff55dbf286fdcb0fccc2c7342c5bf251532b175ab
Size

384KB
MD5

6983e4e04c5615a0684fcd3305896c83
SHA1

0be7789a57152d29ca046dd8c968d85032c14787
SHA256

cf0ef36dd1fe62470b624d2ff55dbf286fdcb0fccc2c7342c5bf251532b175ab
SHA512

e79051c0dda4d0ac2519645106f7908ce6fe990b7cf94dcb28f2e8c7b2c2a9fffe8b93a79a394724ac7b60137868b9e93a237dc2e4f49b59bd66f84fae566020
SSDEEP

6144:chG7fPlRh9XXKBfPFY/OOMu76rOgvudpK1wIxxSSoyNJU:chUnlRhhXefPLuGrOgvuWuSoyfU

Score

N/A

Malware Config

Signatures

Files

cf0ef36dd1fe62470b624d2ff55dbf286fdcb0fccc2c7342c5bf251532b175ab
.exe windows x86

51f4313cf3765153fa00c40b1cd55447

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegQueryInfoKeyA
RegEnumKeyA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegisterEventSourceA
ReportEventA
DeregisterEventSource

kernel32

WideCharToMultiByte
MultiByteToWideChar
AllocConsole
GetStdHandle
WriteFile
FormatMessageA
LocalFree
GetEnvironmentVariableA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemDirectoryA
GetWindowsDirectoryA
CreateProcessA
GetLastError
GlobalFree
lstrlenA
GlobalAlloc
GlobalLock
lstrcpyA
GlobalUnlock
GetModuleFileNameA
SetEnvironmentVariableA
GetModuleHandleA
GetProcAddress
CreateFileA
CloseHandle
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFilePointer
ReadFile
GetFullPathNameA
GetFileAttributesA
GetTempPathA
FindFirstFileA
FindNextFileA
FindClose
DeleteFileA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
ExitProcess
SetConsoleCtrlHandler
GetCommandLineA
SuspendThread
ResumeThread
SetEvent
CreateEventA
WaitForSingleObject
LoadLibraryA
TerminateThread
TerminateProcess
GetExitCodeProcess
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
DuplicateHandle
InitializeCriticalSection
DeleteCriticalSection
CreateThread
ExitThread
GetStartupInfoA
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue

user32

OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
LoadStringA
MessageBoxA
GetKeyState

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.exc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc1
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 99KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

51f4313cf3765153fa00c40b1cd55447

Headers

File Characteristics

Imports

advapi32

kernel32

user32

version

Sections

.text Size: 148KB - Virtual size: 147KB

.rdata Size: 44KB - Virtual size: 43KB

.exc Size: 12KB - Virtual size: 11KB

.data Size: 26KB - Virtual size: 25KB

.CRT Size: 512B - Virtual size: 56B

.rsrc Size: 3KB - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: 512B - Virtual size: 16B

.bss Size: - Virtual size: 8KB

.rsrc1 Size: 47KB - Virtual size: 48KB

.reloc Size: 99KB - Virtual size: 100KB

.text
Size: 148KB - Virtual size: 147KB

.rdata
Size: 44KB - Virtual size: 43KB

.exc
Size: 12KB - Virtual size: 11KB

.data
Size: 26KB - Virtual size: 25KB

.CRT
Size: 512B - Virtual size: 56B

.rsrc
Size: 3KB - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: 512B - Virtual size: 16B

.bss
Size: - Virtual size: 8KB

.rsrc1
Size: 47KB - Virtual size: 48KB

.reloc
Size: 99KB - Virtual size: 100KB