f2485935e1d1948c312d6725eae748c254a80402e59611666700d61f7bd8f3a2

Sharing

Copy URL

Twitter E-mail

General

Target

f2485935e1d1948c312d6725eae748c254a80402e59611666700d61f7bd8f3a2
Size

163KB
MD5

2fbe5b3de0226d356f21f22be40b677a
SHA1

1a2936c6fd148cccc08c83a4b01fdcf90f7f1cf9
SHA256

f2485935e1d1948c312d6725eae748c254a80402e59611666700d61f7bd8f3a2
SHA512

7e6c7bf2d6662c6096b9122368b7165f7f868d2eb73427ce37468e5dcaea70e97824a73df9d0a0bb233af7b2ed3efe5ae830e1b1342844824e0d895e24deffec
SSDEEP

3072:HKFSMiENZ0xGLlvwkuoERxnzXCDhtosw7qLDG0+QKaYTIp3XWG1gEuKDBzxR:qFSbuZV8Rt7CDQskqfLB0TIdXWGhPL

Score

N/A

Malware Config

Signatures

Files

f2485935e1d1948c312d6725eae748c254a80402e59611666700d61f7bd8f3a2
.exe windows x86

0d34db192d61854171ec82e230324811

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExW
SetFilePointerEx
GetSystemTimeAsFileTime
CompareStringW
FindFirstFileA
ExpandEnvironmentStringsW
SystemTimeToFileTime
GetSystemTime
SetFileTime
SetEndOfFile
WriteFile
LocalFree
lstrlenA
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetFileSizeEx
FindClose
FindFirstFileW
GetFileAttributesW
CreateDirectoryW
GetTempPathW
GlobalFree
GlobalAlloc
GetFileAttributesExW
CopyFileW
CreateHardLinkW
SetFileAttributesW
DeleteFileW
GetTempPathA
GetFileTime
FindNextFileW
GetStdHandle
GetCurrentThread
RemoveDirectoryW
FormatMessageA
GetComputerNameW
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
LoadLibraryA
HeapReAlloc
RtlUnwind
GetLocaleInfoA
HeapSize
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers

user32

PeekMessageW

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

ole32

StgOpenStorageEx

oleaut32

GetActiveObject
SafeArrayGetRecordInfo
VarUI1FromDec
VariantInit

Sections

.text
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d34db192d61854171ec82e230324811

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

Sections

.text Size: 141KB - Virtual size: 141KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 16KB - Virtual size: 16KB

.reloc Size: 512B - Virtual size: 284B

.text
Size: 141KB - Virtual size: 141KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 16KB - Virtual size: 16KB

.reloc
Size: 512B - Virtual size: 284B