cfb41f600d3ada7ed8acf009227cacac220d3a0c4de9b211c6811ec2b4174473

Sharing

Copy URL

Twitter E-mail

General

Target

cfb41f600d3ada7ed8acf009227cacac220d3a0c4de9b211c6811ec2b4174473
Size

317KB
MD5

797d732d30fc70556cf7b8a98d8ad860
SHA1

58fa1d896443066aecabfe63f2b9a96881fa5f3f
SHA256

cfb41f600d3ada7ed8acf009227cacac220d3a0c4de9b211c6811ec2b4174473
SHA512

4c3b7652a8787c83c44c71b9a36a93c4d090c15cfb20d9490f96696c36cea76c9ee98fb35d1830975e87d998a795d24c61d95437255cee26b68026642d2db5af
SSDEEP

6144:uMkDNp3KITrXHpJUyXuXGHnKkvYrmgbjJmVGY2:bkrDXXpJUEuXGdVGP

Score

N/A

Malware Config

Signatures

Files

cfb41f600d3ada7ed8acf009227cacac220d3a0c4de9b211c6811ec2b4174473
.exe windows x86

c024fe73abf2fde7ce770d3acc68fc85

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
InterlockedIncrement
InterlockedExchange
lstrcpyA
GetTempPathA
CreateProcessA
GetWindowsDirectoryA
TerminateProcess
lstrcmpiW
GetStringTypeA
GetSystemTimeAsFileTime
VirtualQuery
GetCPInfo
UnhandledExceptionFilter
GetSystemInfo
SetHandleCount
GetDriveTypeA
InterlockedCompareExchange
GetVersionExA
GetConsoleOutputCP
GetFullPathNameA
LCMapStringA
GetEnvironmentStrings
GetCurrentProcess
QueryPerformanceCounter
GetFileType
GetCurrentProcessId
SetUnhandledExceptionFilter
CopyFileA
SetErrorMode
LCMapStringW
GetFileAttributesA
GetModuleHandleW
ExitProcess
Sleep
GetCommandLineA
lstrlenA
GetVersion
WideCharToMultiByte
LocalFree
GetACP
LoadLibraryW
RaiseException
GetProcAddress
VirtualProtectEx
GetModuleHandleA
DeleteFileA
lstrlenW
GetOEMCP

msvcrt

__getmainargs
_exit
__p__commode
_adjust_fdiv
__setusermatherr
_controlfp
__p___initenv
_initterm
_except_handler3
_XcptFilter
__p__fmode
__set_app_type

user32

GetForegroundWindow
GetDC
IsWindow
PostMessageA
GetActiveWindow
DestroyWindow
GetMenu
PeekMessageA
SetTimer
GetClientRect
UpdateWindow
TranslateMessage
EndDialog
ShowWindow
SetCursor
SetWindowTextA
DefWindowProcA
CharNextA
GetSubMenu
LoadIconA
GetCursorPos
GetParent
UnregisterClassA
CreatePopupMenu
IsWindowVisible
GetSystemMetrics
wsprintfA
TrackPopupMenu
InvalidateRect
SetWindowLongA
GetWindowRect
CallNextHookEx
PtInRect
RegisterWindowMessageA
RegisterClassA
EnableMenuItem
PostQuitMessage
GetWindow
GetWindowTextA
GetDesktopWindow
GetClassInfoA
DispatchMessageA
SetWindowPos
SetFocus
KillTimer

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 125KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c024fe73abf2fde7ce770d3acc68fc85

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 1KB - Virtual size: 1KB

.rdata Size: 70KB - Virtual size: 70KB

.data Size: 30KB - Virtual size: 30KB

.rsrc Size: 88KB - Virtual size: 88KB

.text Size: 125KB - Virtual size: 128KB

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 70KB - Virtual size: 70KB

.data
Size: 30KB - Virtual size: 30KB

.rsrc
Size: 88KB - Virtual size: 88KB

.text
Size: 125KB - Virtual size: 128KB