d8ce2de45bf0a61db7799883385a68401c968e4d7dfae39e2cbc9aa1272b3832

Sharing

Copy URL Twitter E-mail

General

Target

d8ce2de45bf0a61db7799883385a68401c968e4d7dfae39e2cbc9aa1272b3832
Size

76KB
MD5

77f6c91bbf766e09a77fe3b38ce2cbaf
SHA1

275db5c3ff0840280340553bc36072888ea23853
SHA256

d8ce2de45bf0a61db7799883385a68401c968e4d7dfae39e2cbc9aa1272b3832
SHA512

9b292abe06f1bd81bb11fb0acff44a3a0f176588a067752cae3ec3fe4cf40417d240727e62fe13c786ac806a838da9544ca8ba2ae9b4568c4ff08d9c11b64e1c
SSDEEP

1536:hhR36k5MZ8kXZjNfLsp/w96ef8/UH2Leenrd6bXFw4P:TR36ke1NfLsp/w96ef8/UHnenrd2l

Score

N/A

Malware Config

Signatures

Files

d8ce2de45bf0a61db7799883385a68401c968e4d7dfae39e2cbc9aa1272b3832
.exe windows x86

47954b40735259cfea508f41718ef692

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExW
RegCreateKeyExA
RegCreateKeyExW
RegEnumValueA
RegEnumValueW
RegOpenKeyA
RegOpenKeyW
RegDeleteKeyA
RegDeleteKeyW
RegDeleteValueA
RegDeleteValueW
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyA
RegQueryInfoKeyW
RegEnumKeyExA
RegSetValueExA
RegEnumKeyExW
RegCloseKey

kernel32

LeaveCriticalSection
GetProcAddress
HeapDestroy
GetLastError
LoadResource
SizeofResource
lstrlenA
FreeLibrary
EnterCriticalSection
InterlockedIncrement
GetCommandLineW
GetCurrentThreadId
InitializeCriticalSection
Sleep
DeleteCriticalSection
CreateThread
WaitForSingleObject
CloseHandle
InterlockedDecrement
SetEvent
GetStartupInfoW
lstrcatW
LoadLibraryExW
CreateMutexW
CreateMutexA
GetShortPathNameA
LoadLibraryExA
LoadLibraryA
lstrcpynW
GetModuleHandleW
GetModuleFileNameW
GetModuleFileNameA
FindResourceW
FindResourceA
CreateEventW
CreateEventA
SetLastError
LoadLibraryW
DeleteFileW
IsBadWritePtr
GetShortPathNameW
lstrcpyW
FreeLibraryAndExitThread
WideCharToMultiByte
CreateFileW
GetTempFileNameW
GetTempPathW
WriteFile
lstrcmpiA
lstrcmpiW
GlobalLock
GlobalUnlock
GetVersionExA
lstrlenW
MultiByteToWideChar

ole32

CoRegisterClassObject
CoRevokeClassObject
CoInitializeEx
CoUninitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoResumeClassObjects
ReleaseStgMedium
CoCreateInstance
CoSuspendClassObjects

oleaut32

VarUI4FromStr
SysAllocString
RegisterTypeLi
LoadTypeLi
SysFreeString

shlwapi

StrRetToBufW

shell32

ShellExecuteExW
SHGetDesktopFolder
DragQueryFileW

msvcrt

_purecall
_controlfp
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
memmove
_wsplitpath
wcslen
_wcslwr
free
realloc
malloc
??2@YAPAXI@Z
??3@YAXPAX@Z

user32

GetWindow
IsWindowVisible
GetWindowThreadProcessId
GetDesktopWindow
GetParent
ShowWindow
IsIconic
SetForegroundWindow
SendMessageTimeoutA
SendMessageA
CharNextW
PostThreadMessageW
PostThreadMessageA
FindWindowW
RegisterClipboardFormatW
RegisterWindowMessageA
GetMessageA
DispatchMessageA
DispatchMessageW
FindWindowA
GetMessageW

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47954b40735259cfea508f41718ef692

Headers

File Characteristics

Imports

advapi32

kernel32

ole32

oleaut32

shlwapi

shell32

msvcrt

user32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 32KB - Virtual size: 28KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 32KB - Virtual size: 28KB