5022d3af6f2567c7378f989492fa3c5374839ad1738549262ae463ef10aef9b4

Sharing

Copy URL Twitter E-mail

General

Target

5022d3af6f2567c7378f989492fa3c5374839ad1738549262ae463ef10aef9b4
Size

524KB
MD5

63880ad7a65e21f7aab10a4df70aeb80
SHA1

5687f484a5dd6bcff4fbe4486479331262b70015
SHA256

5022d3af6f2567c7378f989492fa3c5374839ad1738549262ae463ef10aef9b4
SHA512

03c6a8e76a51e3c9700339face340bbc60ea9074b49b1fe14d5aa871265c40f7d9a4067d7991aaad2e762477e8f9f213d8073607d02cc1b9365270ecd3876b7a
SSDEEP

6144:lYUvR8Z2/balbqxgtUmG/p7aKpy9FFFRaIqR:2Uvd+UxgtTPK49PFRaIc

Score

N/A

Malware Config

Signatures

Files

5022d3af6f2567c7378f989492fa3c5374839ad1738549262ae463ef10aef9b4
.exe windows x86

661e3bb68abc6d3096792feee0432ffe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrRChrW
StrStrIA

kernel32

GetProcAddress
GetModuleHandleW
GetModuleFileNameW
LoadLibraryA
GetModuleFileNameA
LoadLibraryW
SetCurrentDirectoryA
GetCommandLineA
SetStdHandle
LCMapStringW
VirtualProtect
GetLocaleInfoA
GetSystemInfo
WideCharToMultiByte
SetFilePointer
GetCPInfo
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
VirtualQuery
ReadFile
FlushFileBuffers
LCMapStringA
GetTickCount
ExitProcess
RtlUnwind
RaiseException
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetStartupInfoW
GetVersionExA
HeapAlloc
HeapFree
QueryPerformanceCounter
CloseHandle
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
HeapReAlloc
HeapSize
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
InterlockedExchange

user32

wsprintfW
GetDesktopWindow

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 392KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�S�
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

661e3bb68abc6d3096792feee0432ffe

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

advapi32

Sections

.text Size: 40KB - Virtual size: 38KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 392KB - Virtual size: 388KB

�S� Size: 76KB - Virtual size: 76KB

.text
Size: 40KB - Virtual size: 38KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 392KB - Virtual size: 388KB

�S�
Size: 76KB - Virtual size: 76KB