222538ff0fa1de709d43bd1a94aef0d322efbd5c968b8163b1e8702c2597a730

Sharing

Copy URL Twitter E-mail

General

Target

222538ff0fa1de709d43bd1a94aef0d322efbd5c968b8163b1e8702c2597a730
Size

216KB
MD5

7c9de1b9fe9d17c63151b65e0c43bc40
SHA1

1b87ab071de01ec6a872dd16197523968472ab85
SHA256

222538ff0fa1de709d43bd1a94aef0d322efbd5c968b8163b1e8702c2597a730
SHA512

ad82630f3e10dcd2a4fb096310ce69fcdbdbb9f7cb3aed5e1179542c4c9203d808a1148b56ad34984ea0e96f79fb42b42b96b0b853fb72a77bd7d391eabf9ec1
SSDEEP

6144:R5wxoj98qidhOykoMREcu+Z7hOPBkRHqs9ltGt:oxdMKQ1KMt

Score

N/A

Malware Config

Signatures

Files

222538ff0fa1de709d43bd1a94aef0d322efbd5c968b8163b1e8702c2597a730
.exe windows x86

245a6b5030322c1d69279c086bdd6014

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

EnumDependentServicesA
EnumServicesStatusA
NotifyChangeEventLog
ObjectDeleteAuditAlarmA
ObjectPrivilegeAuditAlarmW
RegEnumKeyA
RegLoadKeyW
RegQueryInfoKeyA
RegQueryInfoKeyW

kernel32

CloseHandle
CreateFileA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetACP
GetBinaryTypeA
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetLogicalDriveStringsA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPrivateProfileSectionW
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemDefaultUILanguage
GetVersion
GetVersionExA
GetVersionExW
GlobalMemoryStatus
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
RaiseException
ReadConsoleInputA
ReadProcessMemory
RtlUnwind
SetConsoleCtrlHandler
SetConsoleOutputCP
SetFilePointer
SetHandleCount
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VerLanguageNameA
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile

user32

AnimateWindow
CascadeWindows
ChangeMenuA
CharNextA
CreateMenu
EnumThreadWindows
FindWindowA
GetThreadDesktop
IsWindow
LoadImageA
LoadKeyboardLayoutA
MessageBoxA
SendMessageCallbackW
SetWindowWord
wsprintfA

Exports

Exports

__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

245a6b5030322c1d69279c086bdd6014

Headers

File Characteristics

Imports

advapi32

kernel32

user32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 44KB

.data Size: 13KB - Virtual size: 28KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 153KB - Virtual size: 152KB

.reloc Size: 3KB - Virtual size: 4KB

.text
Size: 40KB - Virtual size: 44KB

.data
Size: 13KB - Virtual size: 28KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 153KB - Virtual size: 152KB

.reloc
Size: 3KB - Virtual size: 4KB