e919e3706fa8b59e1f7bef41c2691430f2f18317eaf92bdd0e4f6170f1132c79

Sharing

Copy URL Twitter E-mail

General

Target

e919e3706fa8b59e1f7bef41c2691430f2f18317eaf92bdd0e4f6170f1132c79
Size

141KB
MD5

6b09495d7a009c9c2a755b584a37c4d0
SHA1

d34670db477ea9372a9f2bfd2491e62644fa4f73
SHA256

e919e3706fa8b59e1f7bef41c2691430f2f18317eaf92bdd0e4f6170f1132c79
SHA512

e26de07862b10ea1fd92f043efa7316d5eb4d76ff3e11c38ed357c5cb5815c51748b1bd77cc2b779cda0c8f69328be7379796f449dc778407ae49072544ec15f
SSDEEP

1536:EXZVOcvqpF2IipiiERrNxqMtZmej7dplfvgTHL1AB/81+Sb5ItnKVEKKhrxwXeW5:8/OcvqpF2w/vFYr1AFolengEx7l4

Score

N/A

Malware Config

Signatures

Files

e919e3706fa8b59e1f7bef41c2691430f2f18317eaf92bdd0e4f6170f1132c79
.exe windows x86

f7945649f43d3d425da29510ec2d3d2d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathAppendW

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
Sleep
RaiseException
LoadLibraryA
SetDllDirectoryW
UnhandledExceptionFilter
FreeLibrary
GetLastError
InterlockedExchange
LocalAlloc
GetProcAddress

user32

MessageBoxW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

SHGetFolderPathW

msvcp80

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z

msvcr80

_wgetenv
_scwprintf
_swprintf
??_V@YAXPAX@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
__CxxFrameHandler3
_amsg_exit
??1exception@std@@UAE@XZ
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
_controlfp_s
__wgetmainargs
_CxxThrowException
_wputenv
??3@YAXPAX@Z

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f7945649f43d3d425da29510ec2d3d2d

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

advapi32

shell32

msvcp80

msvcr80

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 49KB - Virtual size: 49KB

.reloc Size: 77KB - Virtual size: 80KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 49KB - Virtual size: 49KB

.reloc
Size: 77KB - Virtual size: 80KB