d83cddb3a092be9c09315856256d5070d12b674c48e16524dd0656213380df7c

Sharing

Copy URL Twitter E-mail

General

Target

d83cddb3a092be9c09315856256d5070d12b674c48e16524dd0656213380df7c
Size

294KB
MD5

91b5116e6e9f9610a6a464c10ae93656
SHA1

4c69553ca3f148e49f4701c91f3927282c571999
SHA256

d83cddb3a092be9c09315856256d5070d12b674c48e16524dd0656213380df7c
SHA512

aa0adc76d67d3fd797a3e6639209476c56194fe074a8fa0a4ddab520ef7c29b6c5fe43bcae3ba97ed5209af73e5e2fcfb694f9e3bb1febaea77479d3cec0e371
SSDEEP

6144:GjAO7F5ApQjAiG4KN0zOyfnNfX7EaRALwZD0TdXv1Hi+e:OAMAN4K+lX7ExJtv1Hi+e

Score

N/A

Malware Config

Signatures

Files

d83cddb3a092be9c09315856256d5070d12b674c48e16524dd0656213380df7c
.exe windows x86

de7256fd9faf435a858e4f467a0ea81b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CompareFileTime
lstrcmpA
FindClose
FileTimeToLocalFileTime
FindFirstFileA
LocalFree
FreeLibrary
GetProcAddress
MultiByteToWideChar
LoadLibraryA
FormatMessageA
GetPrivateProfileStringA
GetLastError
GetSystemDirectoryA
FindNextFileA
GetShortPathNameA
RemoveDirectoryA
CompareStringA
SystemTimeToFileTime
GetLocalTime
GetFileAttributesA
SetErrorMode
GetDiskFreeSpaceA
lstrcmpiA
InterlockedCompareExchange
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LocalAlloc
WaitForMultipleObjectsEx
CreateThread
GetModuleFileNameW
GetSystemInfo
InitializeCriticalSection
lstrcpyW
PostQueuedCompletionStatus
SleepEx
CreateIoCompletionPort
CreateEventW
CloseHandle
SetEvent
ResetEvent
HeapReAlloc
InterlockedDecrement
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
GetWindowsDirectoryA
lstrlenA
GetStartupInfoA
InterlockedIncrement
DeleteCriticalSection
DeleteFileA
CreateDirectoryA
SetFileAttributesA
WritePrivateProfileStringA
GetVersionExA
GetModuleFileNameA
UnmapViewOfFile
SetLastError
LoadLibraryExW
Sleep
DisableThreadLibraryCalls
GetTickCount
GetCommandLineA
InterlockedExchange
VirtualProtect

user32

LoadStringA
MessageBoxA
SendMessageA
GetDlgItem
DialogBoxParamA
SetCursor
LoadCursorA
SetDlgItemTextA
GetClientRect
CharUpperA
CharNextW
wsprintfA
EndDialog

advapi32

RegQueryValueExA
RegEnumValueA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegEnumKeyA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyExA
RegDeleteValueA
RegSetValueA
RegOpenKeyExW
RegEnumKeyExW
RegCreateKeyExW
RegQueryValueExW
RegQueryInfoKeyA
RegQueryInfoKeyW
RegCloseKey

ole32

CoInitializeEx
CoCreateInstance

msvcrt

__p__fmode
_controlfp
__set_app_type
__CxxFrameHandler
_except_handler3
free
malloc
_adjust_fdiv
_initterm
_onexit
memcpy
bsearch
memset
_vsnprintf
_amsg_exit
__p__commode
wcsstr
_wcslwr
_wsplitpath
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__setusermatherr
wcslen

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 229KB - Virtual size: 457KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de7256fd9faf435a858e4f467a0ea81b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

msvcrt

msvcp60

Sections

.text Size: 53KB - Virtual size: 52KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 229KB - Virtual size: 457KB

.rsrc Size: 7KB - Virtual size: 6KB

.text
Size: 53KB - Virtual size: 52KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 229KB - Virtual size: 457KB

.rsrc
Size: 7KB - Virtual size: 6KB