cf15d97e0dadc0986433a775dde66686b28aed1e5fb07458db470c29916f559f

Sharing

Copy URL Twitter E-mail

General

Target

cf15d97e0dadc0986433a775dde66686b28aed1e5fb07458db470c29916f559f
Size

60KB
MD5

60588510c271e973436bbfed777f5fc0
SHA1

22688cbbe4af3ce75cca2b26a48faaba765d16a7
SHA256

cf15d97e0dadc0986433a775dde66686b28aed1e5fb07458db470c29916f559f
SHA512

f6cbc5fbeef370aed2712ff0240b8970bf9d8f7b6be79a91ddcd8b275d7fb41696ca1e26f79fa1bcda272a914255cab609d04801bf8f5b161f6ccbe09cc510d5
SSDEEP

1536:ByqyLNPtLOFKQRigTG13M8pEFBxFnToIf+CEu:Bzy5PJMW30xtTBf+f

Score

N/A

Malware Config

Signatures

Files

cf15d97e0dadc0986433a775dde66686b28aed1e5fb07458db470c29916f559f
.dll windows x86

6a3bf3ca1162a5b2221391f1c41c235d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
_initterm
printf
fgets
malloc
strcmp
exit
free
strstr
wcscpy
wcscat
fprintf
fwrite
fseek
sprintf
_strupr
strrchr
strchr
_beginthreadex
strlen
??2@YAPAXI@Z
strncpy
_beginthread
??3@YAXPAX@Z
__CxxFrameHandler
fclose
_except_handler3
_mkdir
memcpy
memset
strcpy
strcat
fopen
fread
??1type_info@@UAE@XZ
_CxxThrowException

kernel32

FindClose
CopyFileA
WideCharToMultiByte
lstrcmpA
GetTickCount
TerminateThread
WaitNamedPipeA
GetEnvironmentVariableW
DeleteFileW
GetModuleFileNameW
CreateProcessW
WaitForSingleObject
GetFileAttributesW
CreateFileW
GetSystemDirectoryW
GetFileTime
SetFileTime
SetFilePointer
ReadFile
lstrcpyA
lstrlenA
GetFileSize
GetVolumeInformationA
CreateProcessA
TerminateProcess
GetCurrentProcess
OpenProcess
FindFirstFileA
ExitProcess
GetProcAddress
Sleep
DeleteFileA
GetTempPathA
GetEnvironmentVariableA
GetLastError
GetModuleFileNameA
FreeLibrary
DisableThreadLibraryCalls
LoadLibraryA
GetSystemDirectoryA
CreateDirectoryA
CreateFileA
GetDiskFreeSpaceExA
GetDriveTypeA
GetLogicalDriveStringsA
FindNextFileA
WriteFile
FileTimeToSystemTime
CloseHandle
LocalFree

user32

wsprintfA

advapi32

LookupPrivilegeValueA
OpenProcessToken
CredEnumerateA
AdjustTokenPrivileges

crypt32

CryptUnprotectData

shell32

SHEmptyRecycleBinA
SHFileOperationA

psapi

EnumProcessModules
EnumProcesses
GetModuleBaseNameA

ole32

CoUninitialize
CoInitialize

oleaut32

GetErrorInfo

Exports

Exports

CompareLinkInfoReferents
CompareLinkInfoVolumes
CreateLinkDrive
CreateLinkInfo
CreateLinkInfoA
CreateLinkInfoW
DestroyLinkInfo
DisconnectLinkInfo
GetCanonicalPathInfo
GetCanonicalPathInfoA
GetCanonicalPathInfoW
GetLinkInfoData
IsValidLinkInfo
ResolveLinkInfo
ResolveLinkInfoA
ResolveLinkInfoW

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a3bf3ca1162a5b2221391f1c41c235d

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

crypt32

shell32

psapi

ole32

oleaut32

Exports

Exports

Sections

.text Size: 37KB - Virtual size: 36KB

.rdata Size: 15KB - Virtual size: 15KB

.data Size: 4KB - Virtual size: 6KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 37KB - Virtual size: 36KB

.rdata
Size: 15KB - Virtual size: 15KB

.data
Size: 4KB - Virtual size: 6KB

.reloc
Size: 2KB - Virtual size: 2KB