70337e2453a020374f5dbb2842a5b5f0fdba83864eec2826986bbdcd7efc87f2

Sharing

Copy URL Twitter E-mail

General

Target

70337e2453a020374f5dbb2842a5b5f0fdba83864eec2826986bbdcd7efc87f2
Size

132KB
MD5

6f699ce37f8b421abc53cfd7d6a4b1f0
SHA1

c6e3c0189075dbc7cde4437ddd1457461acc27e0
SHA256

70337e2453a020374f5dbb2842a5b5f0fdba83864eec2826986bbdcd7efc87f2
SHA512

9c974b6bc1d30964dbd9246de35aaf0387d7d1b753dab3dad9a2e6b3e92b23a9255e3b7a712bdef82584ba9a8c7a555b4751250d02c0ff8ca88ae4ada5960bc0
SSDEEP

3072:eZcqghFWlCI9l3VaHqwn+aLXioIXmlOTP2:Jqgh8pc+aTvwmEP2

Score

N/A

Malware Config

Signatures

Files

70337e2453a020374f5dbb2842a5b5f0fdba83864eec2826986bbdcd7efc87f2
.exe windows x86

7969d6cea787b128bdc0d2339d421252

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
lstrcpyW
GlobalAlloc
WriteFile
WideCharToMultiByte
GetCurrentDirectoryW
GetModuleFileNameW
lstrcmpiW
DeviceIoControl
VirtualProtect
GetLocaleInfoA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
CreateFileW
FileTimeToSystemTime
QueryPerformanceCounter
SetStdHandle
VirtualQuery
InterlockedExchange
RtlUnwind
GetCPInfo
GetOEMCP
GetACP
LoadLibraryA
HeapReAlloc
VirtualAlloc
SetFilePointer
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetFileTime
GetCurrentThreadId
CloseHandle
FreeEnvironmentStringsW
GetEnvironmentStrings
SystemTimeToTzSpecificLocalTime
lstrcatW
GetTickCount
lstrlenW
GetSystemInfo
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
HeapAlloc
HeapFree
GetCurrentProcess
GetLastError
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
TerminateProcess

user32

SendMessageW
PostMessageW
GetParent
MessageBoxW
wsprintfW
CallWindowProcW
DefWindowProcW
GetMessageW
DispatchMessageW
TranslateMessage
LoadCursorW
RegisterClassW
ShowWindow
UpdateWindow
BeginPaint
GetClientRect
FillRect
EndPaint
DestroyWindow
PostQuitMessage
CreateWindowExW
SetWindowTextW
GetDC
ReleaseDC
GetSystemMetrics
GetWindowRect
MoveWindow
GetWindowLongW
SetWindowLongW
SetFocus

gdi32

GetTextExtentPoint32W
GetTextMetricsW

comdlg32

GetSaveFileNameW

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

shell32

SHGetFolderPathW

ole32

StringFromGUID2

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vrdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7969d6cea787b128bdc0d2339d421252

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

version

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 23KB

.rsrc Size: 4KB - Virtual size: 1KB

.vrdata Size: 76KB - Virtual size: 76KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 23KB

.rsrc
Size: 4KB - Virtual size: 1KB

.vrdata
Size: 76KB - Virtual size: 76KB