c4dc465986fe197818fee03bc76651232d7281092083c9c143153f54ad341df6

Sharing

Copy URL Twitter E-mail

General

Target

c4dc465986fe197818fee03bc76651232d7281092083c9c143153f54ad341df6
Size

96KB
MD5

60221a92503d91ae411ac134ff7ca581
SHA1

2b809ab54e6065c2bea11368230db1d7414bd72a
SHA256

c4dc465986fe197818fee03bc76651232d7281092083c9c143153f54ad341df6
SHA512

bce2f69e77dbff9b3b909e609d5a76b91237c9a4af10b3d56760c34fb6148576dcdf3ef37f6e8a12a6b0c949c1afa38b3eafcd4df5601d179f6e3f605cbca125
SSDEEP

1536:FHKgrIvT1FAIEA1euEu8VurZc69UvAD8GXN+I7fJ+aCl1few:ETHAVGcCUkzoI7h+aS1Gw

Score

N/A

Malware Config

Signatures

Files

c4dc465986fe197818fee03bc76651232d7281092083c9c143153f54ad341df6
.exe windows x86

55b704ba89ea9ab3b99cc7dc45bebf96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateFileA
CreateFileW
VirtualFree
ExitProcess
VirtualAlloc
GetModuleHandleA
ResumeThread
CreateProcessA
GetCurrentProcess
GetModuleFileNameA
GetVersionExA
ReadFile
GetFileSize
SetFileAttributesA
SetCurrentDirectoryA
GetDriveTypeA
MultiByteToWideChar
GetCurrentDirectoryA
SuspendThread
GetThreadContext
FlushInstructionCache
SetThreadContext
VirtualProtectEx
WriteProcessMemory
FlushFileBuffers
VirtualQuery
GetSystemInfo
VirtualProtect
CloseHandle
SetFilePointer
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
RtlUnwind
GetProcAddress
TerminateProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
QueryPerformanceCounter
GetTickCount

user32

PostMessageA
DefWindowProcA
PostQuitMessage
MessageBoxA
LoadIconA
RegisterClassA
CreateWindowExA
SetFocus
SetWindowTextA
GetMessageA
TranslateMessage
DispatchMessageA

gdi32

GetStockObject

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55b704ba89ea9ab3b99cc7dc45bebf96

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 40KB - Virtual size: 39KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 40KB - Virtual size: 39KB