b99c4a21c762180329cf0ae22853d5ad04cbc3b7003a31acccd5322b536dcdbe

General

Target

b99c4a21c762180329cf0ae22853d5ad04cbc3b7003a31acccd5322b536dcdbe
Size

163KB
MD5

6d1c1c58796243973d1d0066c56598a5
SHA1

888f371691b67859b25770706573ec68616f98c9
SHA256

b99c4a21c762180329cf0ae22853d5ad04cbc3b7003a31acccd5322b536dcdbe
SHA512

7f3bee85ff43fbc26584a2813ee2e7922a86acfe875a1691f43e10b73bd600bf9aabd9d3282e05725715d473b93aac946a9bb44a66bac87a9bf6dff53bb0f0cd
SSDEEP

3072:Mswbz6DEnZBgeVfWQo6/P2q1l7w1AQDW3wXjZAgrs634TS7/1rCYlxg:4z6DsBNpG0f+ZuwWw4TS0Yl

Score

N/A

Malware Config

Signatures

Files

b99c4a21c762180329cf0ae22853d5ad04cbc3b7003a31acccd5322b536dcdbe
.exe windows x86

5f81c21ccc62f2253fa41dea2919ac75

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetLastError
GetTickCount
FillConsoleOutputCharacterA
lstrcpyA
GlobalFree
GetProcessWorkingSetSize
OutputDebugStringW
GetCPInfo
InitializeCriticalSection
LockResource
EnumResourceNamesA
GetACP
lstrcmpiW
CreateFileMappingW
MultiByteToWideChar
FreeEnvironmentStringsW
GlobalAlloc
FindClose
lstrcpyW
WideCharToMultiByte
lstrlenW
GetModuleHandleW

shlwapi

PathCombineW
PathFileExistsW

advapi32

RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegSetValueExW

user32

PostThreadMessageW
GetMessageW
SendMessageA
DispatchMessageW
SetTimer
KillTimer
wsprintfW
CharNextW
TranslateMessage
CharUpperW
GetDC
UnregisterClassA

oleacc

LresultFromObject
CreateStdAccessibleObject

ole32

CoRegisterClassObject
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoRevokeClassObject
CoTaskMemRealloc
StringFromGUID2
CoInitialize
CoCreateInstance
StringFromCLSID

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f81c21ccc62f2253fa41dea2919ac75

Headers

File Characteristics

Imports

kernel32

shlwapi

advapi32

user32

oleacc

ole32

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 58KB - Virtual size: 58KB

.isete Size: 1024B - Virtual size: 244KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 58KB - Virtual size: 58KB

.isete
Size: 1024B - Virtual size: 244KB