00b995f7780367c8b4cb9f1aa70d4d0de9657c2977717e7f260f843ee15cfb9e

Sharing

Copy URL Twitter E-mail

General

Target

00b995f7780367c8b4cb9f1aa70d4d0de9657c2977717e7f260f843ee15cfb9e
Size

259KB
MD5

824d38e1dbbb6f5f5782ba60976e4ea0
SHA1

9f848e3fa8d34e75fdfd54a82d31776d64c65a4a
SHA256

00b995f7780367c8b4cb9f1aa70d4d0de9657c2977717e7f260f843ee15cfb9e
SHA512

27c72f2becbda21b312b658010f1a01826368f8e6373d7f40bb8a4e71fcb91eb8510a4b4a8a592cd21508159bb74fa8eef778d3ae8e4a25c4f610e39cb597873
SSDEEP

6144:r904u58InfRYuriDb2lzsxi/CJbumYYL/bDklv1PnPl:hWtfKuriDb2TKdIcTDklv1PPl

Score

N/A

Malware Config

Signatures

Files

00b995f7780367c8b4cb9f1aa70d4d0de9657c2977717e7f260f843ee15cfb9e
.exe windows x86

a5328e33e016cfc12b2e018287d8651e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
LoadLibraryW
LeaveCriticalSection
MapViewOfFile
LCMapStringW
GetFileAttributesA
CompareStringW
GlobalAlloc
QueryPerformanceCounter
GetSystemDefaultLangID
HeapCreate
OpenSemaphoreA
UnmapViewOfFile
WriteFile
FindNextFileA
CreateMutexA
GetCPInfo
OutputDebugStringA
GetCurrentProcessId
VirtualFree
GetEnvironmentStringsW
FindFirstFileA
GetOEMCP
WaitForMultipleObjects
GetUserDefaultLangID
GetModuleFileNameA
GetDiskFreeSpaceA
GetFileSize
OpenFileMappingA
RemoveDirectoryA
GetProcAddress
GetExitCodeThread
OpenEventA
CreateThread
CreateFileA
ExpandEnvironmentStringsA
CreateSemaphoreA
SetEndOfFile
SetFilePointer
ReadFileEx
CreateDirectoryA
GetModuleHandleW
CloseHandle
ReadFile
GetUserDefaultLCID
CreateEventA
GetEnvironmentStringsA
GetTickCount
InterlockedDecrement
SetThreadPriority
OpenMutexA
WriteFileEx
ReleaseMutex
GlobalFree
GetLastError
EnterCriticalSection
InterlockedIncrement
GlobalFindAtomW
lstrlenA
GetSystemInfo
ReleaseSemaphore
FreeLibrary
SetLastError
SetEvent
lstrcmpA
FindClose
WaitForSingleObjectEx
DeleteCriticalSection
WaitForSingleObject
lstrcpyA

msvcrt

isprint
_iob
strncmp
_stricmp
_makepath
fprintf
printf
fclose
vprintf
fopen
memmove
_strupr
wcslen
strncpy
toupper
_fullpath
rand
fflush
_splitpath
_itoa
_strnicmp
sprintf

advapi32

RegQueryValueExA
RegisterEventSourceA
AllocateAndInitializeSid
DeregisterEventSource
RegSetValueExA
SetSecurityDescriptorDacl
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
FreeSid
RegOpenKeyExA
InitializeAcl
GetLengthSid
RegDeleteValueA
ReportEventA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 241KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a5328e33e016cfc12b2e018287d8651e

Headers

File Characteristics

Imports

kernel32

msvcrt

advapi32

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 2KB

.rsrc Size: 241KB - Virtual size: 241KB

.reloc Size: 512B - Virtual size: 284B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 241KB - Virtual size: 241KB

.reloc
Size: 512B - Virtual size: 284B