89a6505949540cbb58f7ea016e9eebcc38cbbfef513f9f862d7d2134324ca123

Sharing

Copy URL Twitter E-mail

General

Target

89a6505949540cbb58f7ea016e9eebcc38cbbfef513f9f862d7d2134324ca123
Size

116KB
MD5

621abe7c5a8868e2726993a8c8862ce0
SHA1

35f73213119b89a4029e46b10035959122a4f9bb
SHA256

89a6505949540cbb58f7ea016e9eebcc38cbbfef513f9f862d7d2134324ca123
SHA512

4bde9c45cfad26e7034d3210643f03662e702182c75301f6a632059cd6de55333f42d8d6aa587a4969335c338703c03ea82d8e9ebded44b49cd06c9872b26e6b
SSDEEP

1536:/XeIl5drx0PnQHx1kQDukZgdE0or/ny4VUMtTDiGCq2iW7z:J1HMJE0aq4CMtTWGCH

Score

N/A

Malware Config

Signatures

Files

89a6505949540cbb58f7ea016e9eebcc38cbbfef513f9f862d7d2134324ca123
.exe windows x86

75feb88681f48e0e4050e8209fa6232d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
Process32Next
CreateToolhelp32Snapshot
CloseHandle
GetCurrentProcessId
Process32First
GetModuleFileNameA
DeleteFileW
GlobalFree
MoveFileW
GetLastError
CopyFileW
GetSystemDirectoryW
GlobalAlloc
GetFullPathNameW
CreateFileA
FlushFileBuffers
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
VirtualAlloc
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
Sleep
HeapSize
LoadLibraryA
InitializeCriticalSection
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

user32

MessageBoxA
wsprintfW

advapi32

RegEnumKeyA
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA

shlwapi

PathFileExistsW

ws2_32

WSCWriteProviderOrder
WSCInstallProvider
WSCEnumProtocols
WSCDeinstallProvider

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�y��u�
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

75feb88681f48e0e4050e8209fa6232d

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

shlwapi

ws2_32

Sections

.text Size: 64KB - Virtual size: 62KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 176B

�y��u� Size: 20KB - Virtual size: 20KB

.text
Size: 64KB - Virtual size: 62KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 176B

�y��u�
Size: 20KB - Virtual size: 20KB