0f46b486cad921e3604d5f2d567255299ae86905cd2cbe053b00f33d672f59b4

Sharing

Copy URL Twitter E-mail

General

Target

0f46b486cad921e3604d5f2d567255299ae86905cd2cbe053b00f33d672f59b4
Size

112KB
MD5

1c77918fccd4d33ff75c7c99ceb9a350
SHA1

235d46829fb84e4cf246db9c393fa829ad3f008d
SHA256

0f46b486cad921e3604d5f2d567255299ae86905cd2cbe053b00f33d672f59b4
SHA512

95f16e2c6054276b74b309f47d89ccbd763f4c2de9c0d372abd53de4f85faff2da7254a7fb1113a79568b864d05ba65e7f296e090332d2c9ebd02b3cfa0c125d
SSDEEP

3072:V3sgil2AzIpOxCa6yzr1A5ckZZjOmbSNbeoh:V31ASOx/6yz6dZZjlKbr

Score

N/A

Malware Config

Signatures

Files

0f46b486cad921e3604d5f2d567255299ae86905cd2cbe053b00f33d672f59b4
.exe windows x86

83753fe6301c823bc2c18403a83e91e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
Process32NextW
OpenProcess
CreateMutexW
GetLastError
CloseHandle
GetModuleHandleW
GetFileSize
CreateFileW
ReadFile
GetCommandLineW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
InterlockedIncrement
InterlockedDecrement
GetCurrentProcessId
VirtualQuery
FindFirstFileW
DeleteFileW
Sleep
Process32FirstW
FindClose
CreateDirectoryW
GetProcAddress
QueryPerformanceFrequency
GetProcessTimes
GetCurrentProcess
GetSystemTimeAsFileTime
GetFileAttributesW
SetFileAttributesW
SetFilePointer
WriteFile
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
CreateToolhelp32Snapshot
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
MoveFileW
GetModuleFileNameW

user32

SendMessageW
IsWindow
DefWindowProcW
ShowWindow
CreateWindowExW
RegisterClassExW
GetClassInfoExW
DestroyWindow
GetDesktopWindow
CharNextW

gdi32

GetStockObject

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

shell32

SHGetSpecialFolderPathW
ShellExecuteW

oleaut32

SysStringLen
SysFreeString

msvcp80

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

shlwapi

PathFileExistsW

msvcr80

_snwprintf
_CxxThrowException
__CxxFrameHandler3
memset
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
??3@YAXPAX@Z
_wfopen_s
fread
fclose
_wtol
_time64
??_V@YAXPAX@Z
??2@YAPAXI@Z
wcsstr
malloc
free
realloc
_msize
memmove
_purecall
_ismbcspace
memmove_s
_vscwprintf
_vswprintf
wcsrchr
iswspace
memcpy
wcsncpy
??0exception@std@@QAE@XZ
iswdigit
??0exception@std@@QAE@ABQBD@Z
wcsncmp
_wtoi
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit

psapi

GetModuleFileNameExW

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

83753fe6301c823bc2c18403a83e91e1

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

oleaut32

msvcp80

shlwapi

msvcr80

psapi

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 69KB - Virtual size: 72KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 69KB - Virtual size: 72KB