7f4df52aa03f510fe83687c161897618c20ecc7b8292ca9ec7bccb8c81438fe2

Sharing

Copy URL Twitter E-mail

General

Target

7f4df52aa03f510fe83687c161897618c20ecc7b8292ca9ec7bccb8c81438fe2
Size

163KB
MD5

495ec36ef60ad716bcf9db66aea5c820
SHA1

80607df5f725a5c574c87c08bcaa4efd03d1445a
SHA256

7f4df52aa03f510fe83687c161897618c20ecc7b8292ca9ec7bccb8c81438fe2
SHA512

c73649891d28af711ba94c05836f11d4b38d5257756464227252b524f1d3e2308e075d4682ea99f6d14fd6fb91bd6757e8f22eaa8698cd78e6deaec8e0aa3d9c
SSDEEP

3072:lC82i82psbU0vrreHZAzIWswpHh7tiuI6L+J5rwKPO2F8O4JCeL:lCFilsbtzXd2T5rwKPzF8HCeL

Score

N/A

Malware Config

Signatures

Files

7f4df52aa03f510fe83687c161897618c20ecc7b8292ca9ec7bccb8c81438fe2
.exe windows x86

f3fad95e43c8f6135132a6405c88bc02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

GetFileAttributesW
GetFullPathNameW
Sleep
FindResourceW
CreateProcessW
CreateDirectoryW
SizeofResource
CreateFileW
LockResource
WriteFile
MoveFileExW
GetFileSize
SetFilePointer
FindResourceExW
SetEndOfFile
CloseHandle
GetLastError
CopyFileW
DeleteFileW
GetTickCount
CreateFileA
WriteConsoleW
MoveFileW
CompareStringA
CompareStringW
SetEnvironmentVariableA
LoadResource
SetUnhandledExceptionFilter
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
ExitProcess
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WideCharToMultiByte
GetTimeZoneInformation
GetStdHandle
GetModuleFileNameA
LoadLibraryA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
VirtualAlloc
RtlUnwind
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers

user32

GetDesktopWindow
UnregisterClassA

advapi32

RegCreateKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW

shell32

SHCreateDirectoryExW
SHFileOperationW
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderLocation

shlwapi

PathFileExistsW

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f3fad95e43c8f6135132a6405c88bc02

Headers

File Characteristics

Imports

version

kernel32

user32

advapi32

shell32

shlwapi

Sections

.text Size: 63KB - Virtual size: 62KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 73KB - Virtual size: 76KB

.text
Size: 63KB - Virtual size: 62KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 73KB - Virtual size: 76KB