b41eab759cf7b3efb5161823c8124005d1fdab5fb73246eda6944e0e7aae7429

Sharing

Copy URL Twitter E-mail

General

Target

b41eab759cf7b3efb5161823c8124005d1fdab5fb73246eda6944e0e7aae7429
Size

171KB
MD5

6bd41b2a151c32ef08e44d7de15468aa
SHA1

d6bbc8db6ea2a3b250458d8d6347bcb8ee764d3e
SHA256

b41eab759cf7b3efb5161823c8124005d1fdab5fb73246eda6944e0e7aae7429
SHA512

dc89b94c88e20a5ead0ba3a837b429c0a6a1df3217e8f8f7e162379f3b048072c1b46821198145e184a3e97bdd5fc8052c3be12022b545ba7edc35ad547bcfb5
SSDEEP

3072:LJWYAsJJVVGd9wJs63OF37JLtjYxMfslpxhtT5GWopxAiQ6SEcw/m8:vPJj+2ynsl/hzVoUPLLJ8

Score

N/A

Malware Config

Signatures

Files

b41eab759cf7b3efb5161823c8124005d1fdab5fb73246eda6944e0e7aae7429
.exe windows x86

36b3f9a6b1c5a6bf936487bd17689bec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerInstallFileA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

GetModuleHandleA
lstrlenA
RemoveDirectoryA
DeleteFileA
GetTempPathA
FindResourceA
SetErrorMode
LeaveCriticalSection
CloseHandle
CreateThread
CreateMutexA
WaitForSingleObject
ReleaseMutex
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetEvent
InterlockedDecrement
CreateEventA
GetPrivateProfileStringA
OpenEventA
CreateProcessA
GetCurrentThreadId
QueryPerformanceFrequency
CreateFileA
SetFilePointer
GetFileSize
HeapAlloc
GetSystemInfo
HeapCreate
FreeLibrary
GetProcAddress
Sleep
LockResource
GetSystemDefaultLangID
MoveFileA
CreateDirectoryA
FindResourceExA
WriteFile
lstrcpyA
LoadResource
CreateFileMappingA
SizeofResource
WritePrivateProfileStringA
GetShortPathNameA
lstrcmpiA
HeapDestroy
lstrcatA
GetTickCount
GetFileAttributesA
GetTempFileNameA
GetStartupInfoA
ExitProcess
GetCommandLineA
DebugBreak
HeapReAlloc
HeapFree
FindClose
VirtualQuery
VirtualProtect
FindFirstFileA
SearchPathA
GetWindowsDirectoryA
lstrcpynA
ResetEvent
QueryPerformanceCounter
SystemTimeToFileTime
GlobalAlloc
GetCurrentProcess
GetCurrentThread
GetVersion
IsBadReadPtr
GlobalLock
GlobalUnlock
GetVersionExA
CompareStringW
CompareStringA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
GetLastError
SetLastError
GetModuleFileNameA
UnmapViewOfFile
GlobalFree
MapViewOfFile
LoadLibraryA
ReadFile
lstrcmpA

user32

PostThreadMessageA
CharUpperA
PeekMessageA
MsgWaitForMultipleObjects
GetDesktopWindow
CreateDialogIndirectParamA
LoadStringA
CharNextA
CharLowerBuffA
GetWindowTextA
SetTimer
TranslateMessage
GetMessageA
SetActiveWindow
ShowWindow
EndDialog
SetWindowTextA
GetDlgItem
SendMessageA
SetDlgItemTextA
wsprintfA
LoadIconA
DestroyWindow
SystemParametersInfoA
SetWindowPos
CharLowerA
IsDialogMessageA
ReleaseDC
DispatchMessageA
GetDC
KillTimer
ScreenToClient
MoveWindow
SetWindowRgn
DialogBoxIndirectParamA
GetWindowRect

gdi32

GetObjectA
GetTextExtentPoint32A
LPtoDP
CreateFontIndirectA
DeleteObject

advapi32

RegSetValueExA
OpenThreadToken
OpenProcessToken
GetTokenInformation
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
AllocateAndInitializeSid
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyA
RegQueryValueA
FreeSid
EqualSid

ole32

CoRevokeClassObject
CoCreateInstance
CoCreateGuid
CoRegisterClassObject
CoTaskMemFree
StringFromCLSID
CoReleaseMarshalData
CoInitialize
CoGetInterfaceAndReleaseStream
CoUninitialize
StringFromGUID2
GetRunningObjectTable
CoTaskMemAlloc
CoMarshalInterThreadInterfaceInStream

oleaut32

SysAllocStringLen
SysStringLen
SysFreeString
VariantCopy
VariantClear
SysAllocString
LoadTypeLi
RegisterTypeLi
LoadRegTypeLi

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.prdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

36b3f9a6b1c5a6bf936487bd17689bec

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Sections

.text Size: 50KB - Virtual size: 49KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 30KB - Virtual size: 30KB

.prdata Size: 76KB - Virtual size: 76KB

.text
Size: 50KB - Virtual size: 49KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 30KB - Virtual size: 30KB

.prdata
Size: 76KB - Virtual size: 76KB