41ca834b70ca6400873df7e10fdb6e1011618d1bfd66b331d1917cbd82999725

Sharing

Copy URL Twitter E-mail

General

Target

41ca834b70ca6400873df7e10fdb6e1011618d1bfd66b331d1917cbd82999725
Size

173KB
MD5

471521ac364ea5731e4774c4aef84fb6
SHA1

43debd89564984f0277b37a87381940eda987ad2
SHA256

41ca834b70ca6400873df7e10fdb6e1011618d1bfd66b331d1917cbd82999725
SHA512

508b4935cb4a6bbc6df8329e7028ce0bb0d9a206b8bd11a0da4fee3903a1fe20e8fb062d2e57548f45fef4ed744f7445062c9f904ad58a2eb374dc24c669fe4a
SSDEEP

3072:P8npjrzptcQPU3au+thbfgrQF4R/OkE1jJRRfZ:P8BlLPDbU8KSRZ

Score

N/A

Malware Config

Signatures

Files

41ca834b70ca6400873df7e10fdb6e1011618d1bfd66b331d1917cbd82999725
.exe windows x86

007d1cd4db528b6c941bafa37e121de0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
WideCharToMultiByte
WriteFile
SetConsoleCtrlHandler
GetModuleHandleW
GetModuleFileNameW
WaitForSingleObject
VirtualQuery
LockResource
ReadFile
FlushFileBuffers
CreateFileA
GetStdHandle
GetACP
GetConsoleOutputCP
CreateProcessW
LoadResource
SizeofResource
WriteConsoleW
WriteConsoleA
SetStdHandle
LoadLibraryA
GetConsoleCP
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
Sleep
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
GetFileType
GetModuleFileNameA
DeleteFileW
VirtualProtect
CloseHandle
FindResourceW
FindResourceExW
VirtualAlloc
GetConsoleMode
RaiseException
MultiByteToWideChar
GetVersionExA
GetTickCount
GetProcAddress
CreateFileW
GetTempPathW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedExchange
GetLocaleInfoA
GetThreadLocale
GetLastError
GetCommandLineA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount

user32

UnregisterClassA

ole32

CoUninitialize
CoTaskMemFree
CoCreateInstance
CoInitialize

oleaut32

VariantClear
SysFreeString
SysAllocStringLen

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

007d1cd4db528b6c941bafa37e121de0

Headers

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

Sections

.text Size: 79KB - Virtual size: 79KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 5KB - Virtual size: 12KB

.xrdata Size: 72KB - Virtual size: 72KB

.text
Size: 79KB - Virtual size: 79KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 5KB - Virtual size: 12KB

.xrdata
Size: 72KB - Virtual size: 72KB