807c844f1437e76ce960642022fc4e2e4ea3b7f4bf9fbf732a9b938021a39aea

Sharing

Copy URL

Twitter E-mail

General

Target

807c844f1437e76ce960642022fc4e2e4ea3b7f4bf9fbf732a9b938021a39aea
Size

630KB
MD5

7ce740d346a81feb84e8a372f9f56f20
SHA1

55d2ddaa9efff5ba75bf0c9a36bf74c337efdd71
SHA256

807c844f1437e76ce960642022fc4e2e4ea3b7f4bf9fbf732a9b938021a39aea
SHA512

055f9e1f56459b268f7855fefc5a483da86fc110a22e971345185dae72bea585eb85a46a8b8aed2776fbf5641b960a477c0e93af96e282ecaa24ffefacc8037a
SSDEEP

12288:oMadOMFLzd7JAuHvYlfuSpzFZWnaaKUKPZ7J5KdBmNVgFl6w4:oMadOOz87mS4at1PBDbNVgFl6w4

Score

N/A

Malware Config

Signatures

Files

807c844f1437e76ce960642022fc4e2e4ea3b7f4bf9fbf732a9b938021a39aea
.exe windows x86

e1768a638391839a9815212a61dc3435

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
CreateFileA
GetFileAttributesA
CreateDirectoryA
MoveFileA
GetTickCount
GetSystemInfo
GetVersion
RaiseException
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
SetCurrentDirectoryA
GetCurrentDirectoryA
IsBadWritePtr
VirtualProtect
IsBadReadPtr
GetModuleHandleA
SetUnhandledExceptionFilter
TerminateThread
WaitForSingleObject
CreateThread
GetCurrentThreadId
WideCharToMultiByte
lstrlenW
GetCurrentProcess
WriteFile
GetThreadContext
VirtualQuery
GetCurrentProcessId
SetFilePointer
GlobalMemoryStatus
MultiByteToWideChar
lstrlenA
SetProcessWorkingSetSize
CreateEventA
LocalFree
SetEvent
WaitForMultipleObjects
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetProcessHeap
HeapSize
SetErrorMode
ReleaseMutex
CloseHandle
GetLastError
CreateMutexA
InterlockedIncrement
InterlockedDecrement
FreeLibrary
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
OpenMutexA
WinExec
LoadLibraryA
GetProcAddress
OpenProcess

user32

GetSystemMetrics
DestroyMenu
CharNextA
ReleaseDC
GetDC
EndPaint
DefWindowProcA
GetSubMenu
DestroyIcon
BeginPaint
SetTimer
IsWindow
KillTimer
FindWindowA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
RegisterWindowMessageA
PostMessageA

advapi32

RegCreateKeyW
RegQueryValueExA
FreeSid
RegEnumKeyExA
RegSetValueW
RegOpenKeyW
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegQueryValueW
RegQueryValueA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey

version

GetFileVersionInfoA
VerQueryValueA

gdi32

GetDeviceCaps

msvcr100

_fmode
__set_app_type
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
_itoa
__setusermatherr
_configthreadlocale
_initterm_e
_putenv
_commode
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z
memset
atoi
strrchr
strncpy
malloc
free
realloc
memcpy
sprintf
_vsnprintf
memmove
getenv
printf
strchr
strstr
_ismbblead
_stricmp
wmemcpy_s
_vscwprintf
vswprintf_s
??_V@YAXPAX@Z
??_U@YAPAXI@Z
memcpy_s
memmove_s
wcsnlen
calloc
_recalloc
_gmtime32
_time32
vsprintf
asctime
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
exit
_acmdln
_initterm

shell32

SHGetFolderPathW
SHCreateDirectoryExW
SHCreateDirectoryExA

shlwapi

PathAddBackslashW
PathAppendW

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 560KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e1768a638391839a9815212a61dc3435

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

version

gdi32

msvcr100

shell32

shlwapi

Sections

.text Size: 49KB - Virtual size: 48KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 1024B - Virtual size: 5KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 560KB - Virtual size: 2.3MB

.text
Size: 49KB - Virtual size: 48KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 1024B - Virtual size: 5KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 560KB - Virtual size: 2.3MB