f3c8812ab184fe0ac675fc60197f25dce7cfd6af392cd418ccc5d7ffb55e3169

Sharing

Copy URL Twitter E-mail

General

Target

f3c8812ab184fe0ac675fc60197f25dce7cfd6af392cd418ccc5d7ffb55e3169
Size

201KB
MD5

2a900e1a4bc4a4410e3a35c7757a9120
SHA1

3fc11a61f8109efe120ba4369e95c9d025553170
SHA256

f3c8812ab184fe0ac675fc60197f25dce7cfd6af392cd418ccc5d7ffb55e3169
SHA512

b9a8583c9134a84d3333c19120c6bc2e6a05663145281dd81b65ab504d376115782d0d4e512d8a6e2efe42c1f69703be2875f5448c28dc5a4cc230551cbc1ffb
SSDEEP

3072:b0RuGUeuoCgg0tznEhEatgYK5p2RuBujAtMlsrGSToFzH+dU0JrHt+:UuGUJQI9tgZ5jG8rGSyzArJL

Score

N/A

Malware Config

Signatures

Files

f3c8812ab184fe0ac675fc60197f25dce7cfd6af392cd418ccc5d7ffb55e3169
.exe windows x86

20a5f0934bbd5ee6523c6a12cb576131

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

shlwapi

StrRStrIW

kernel32

GetPrivateProfileSectionW
lstrcatW
GetWindowsDirectoryW
MoveFileExW
GetModuleFileNameW
CloseHandle
CreateProcessW
CopyFileW
GetTempPathW
GetCurrentProcessId
DeleteFileW
SetFileAttributesW
GetFileAttributesW
WaitForSingleObject
OpenProcess
lstrcmpW
FreeLibrary
GetProcAddress
LoadLibraryExW
FindClose
GetLastError
FindNextFileW
FindFirstFileW
Process32NextW
lstrcmpiW
Process32FirstW
CreateToolhelp32Snapshot
MultiByteToWideChar
HeapAlloc
Sleep
lstrlenW
RemoveDirectoryW
ReadFile
GetFileSize
CreateFileW
LoadLibraryW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateMutexW
lstrcpynW
GetCommandLineW
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
RtlUnwind
InitializeCriticalSection
GetSystemTimeAsFileTime
lstrcpyW
WritePrivateProfileSectionW
WritePrivateProfileStringW
GetVersionExW
GetProcessHeap
HeapFree
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetCommandLineA
GetVersionExA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW

user32

DialogBoxParamW
KillTimer
SetFocus
EndDialog
InvalidateRect
UpdateWindow
SetDlgItemTextW
GetDlgItem
EnableWindow
SystemParametersInfoW
GetWindowRect
MoveWindow
PostMessageW
SetTimer
FindWindowW
SendMessageW
wsprintfW
LoadStringW
MessageBoxW
ShowWindow

advapi32

RegOpenKeyExW
RegDeleteValueW
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegQueryValueExW
RegCloseKey

shell32

SHChangeNotify
ShellExecuteExW

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

20a5f0934bbd5ee6523c6a12cb576131

Headers

File Characteristics

Imports

comctl32

shlwapi

kernel32

user32

advapi32

shell32

Sections

.text Size: 52KB - Virtual size: 48KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 124KB - Virtual size: 124KB

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 124KB - Virtual size: 124KB