2ce3d11054419cd7dd1e1a6b9e226f6c65d43b4bcb6498b426ac65742ab9da25

Sharing

Copy URL

Twitter E-mail

General

Target

2ce3d11054419cd7dd1e1a6b9e226f6c65d43b4bcb6498b426ac65742ab9da25
Size

100KB
MD5

628b683880c5a3d664cf6cea88462a80
SHA1

e81b6200d0f842591430a24da22d5d13ce87cea4
SHA256

2ce3d11054419cd7dd1e1a6b9e226f6c65d43b4bcb6498b426ac65742ab9da25
SHA512

4a0d8226d2c90bdd8e6597b70d5ef913b4820f56a45a21be575a32f0e99e19965b17e6c22a26fb3a03580787478c8b470a0fb7da046cdafc9f8aad7f5cfd10e7
SSDEEP

1536:qr6bTKsTL8FaTMIroT6+JU97GtXfXN5XkJIofLV:qrcT3oS4JOGVvN50JIofLV

Score

N/A

Malware Config

Signatures

Files

2ce3d11054419cd7dd1e1a6b9e226f6c65d43b4bcb6498b426ac65742ab9da25
.exe windows x86

54e1fa8cf1a3fc2453b51c9a59992c5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ResetEvent
OpenProcess
GetProcAddress
CreateProcessA
FindClose
FindFirstFileA
GetVersionExA
GetSystemDirectoryA
GetModuleHandleA
TerminateProcess
GlobalFree
GlobalAlloc
ReleaseMutex
GetCurrentProcessId
ReadFile
SetStdHandle
SetFilePointer
WaitForMultipleObjects
Sleep
SetUnhandledExceptionFilter
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
GetCPInfo
FlushFileBuffers
IsBadWritePtr
HeapReAlloc
VirtualAlloc
FreeEnvironmentStringsA
VirtualFree
HeapCreate
HeapDestroy
WaitForSingleObject
SetEvent
FreeLibrary
CreateThread
GetModuleFileNameA
CreateMutexA
GetLastError
CreateEventA
IsBadReadPtr
IsBadCodePtr
WriteFile
GetStdHandle
SetHandleCount
CloseHandle
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
GetFileAttributesA
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
GetFileType
DeleteCriticalSection
HeapAlloc
InitializeCriticalSection
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue

user32

SetForegroundWindow
GetCursorPos
DispatchMessageA
TranslateMessage
FindWindowA
GetWindowThreadProcessId
SendMessageA
AppendMenuA
CreatePopupMenu
ModifyMenuA
LoadMenuA
GetSubMenu
DestroyMenu
EnableMenuItem
SetMenuDefaultItem
wsprintfA
GetMessageA
TrackPopupMenu
MessageBoxA
GetWindowLongA
DefWindowProcA
LoadStringA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
PostQuitMessage
SetWindowLongA
PostMessageA

gdi32

GetStockObject

advapi32

RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA
Shell_NotifyIconA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�rM
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

54e1fa8cf1a3fc2453b51c9a59992c5b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

version

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 16KB - Virtual size: 20KB

.rsrc Size: 12KB - Virtual size: 11KB

�rM Size: 4KB - Virtual size: 4KB

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 16KB - Virtual size: 20KB

.rsrc
Size: 12KB - Virtual size: 11KB

�rM
Size: 4KB - Virtual size: 4KB