85a9f904e7d59878f1b5e9148763b988782a9e2b200e163be279ed348f85e0bb

Sharing

Copy URL Twitter E-mail

General

Target

85a9f904e7d59878f1b5e9148763b988782a9e2b200e163be279ed348f85e0bb
Size

188KB
MD5

a0eb42abf8a970683978bc6318ba43e0
SHA1

cbe2d5d34b1b59439eb271148b1943a2d97e53f3
SHA256

85a9f904e7d59878f1b5e9148763b988782a9e2b200e163be279ed348f85e0bb
SHA512

520309bad5b3dcc9397de5cba498e07a9cdbfd01acb03841bf9193edff3a5212c301f492b400d4ed3031f1f2a24b831cda2375c9ad994cfeeab7e65655a6085a
SSDEEP

3072:i+i5LFH3kC6pXlsxh+Vi/nC1a9o8xARBk2+MJ5wocOlC7:viFFXkPgkaIRBk2+M7zcB

Score

N/A

Malware Config

Signatures

Files

85a9f904e7d59878f1b5e9148763b988782a9e2b200e163be279ed348f85e0bb
.exe windows x86

2fbe1f84e2e67ce14d8b806931ab3841

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
FindClose
FindFirstFileA
SetFileTime
SystemTimeToFileTime
CreateFileA
GetProcAddress
LoadLibraryA
FreeLibrary
LocalFree
MapViewOfFile
UnmapViewOfFile
ExitProcess
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
MoveFileExA
lstrlenA
VirtualFreeEx
GetExitCodeThread
WaitForSingleObject
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenProcess
GetCurrentProcess
InterlockedDecrement
CloseHandle
EnterCriticalSection
LeaveCriticalSection
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
InitializeCriticalSection
GetCPInfo
GetOEMCP
IsBadCodePtr
IsBadWritePtr
GetTimeZoneInformation
InterlockedExchange
CreateMutexA
DeleteFileA
CopyFileA
GetModuleFileNameA
Sleep
GetSystemDirectoryA
GetWindowsDirectoryA
GetTempPathA
GetCurrentThreadId
GetLastError
FormatMessageA
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
FindNextFileA
SetFilePointer
ReadFile
LCMapStringW
LCMapStringA
HeapSize
DeleteCriticalSection
HeapReAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
SetUnhandledExceptionFilter
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
RaiseException
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
IsBadReadPtr
TerminateProcess
GetFileAttributesA
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
WriteFile

user32

CreateWindowExA
DefWindowProcA
PostQuitMessage
EndPaint
BeginPaint
MessageBoxA
PostThreadMessageA
PostMessageA
TranslateMessage
DispatchMessageA
GetMessageA
UpdateWindow
RegisterClassExA
EnumChildWindows
EnumWindows
GetClassNameA
GetWindowThreadProcessId
SetWindowTextA
SystemParametersInfoA
SetWindowPos
FindWindowA
KillTimer
SetTimer
ShowWindow

advapi32

RegCloseKey
RegEnumKeyA
RegEnumValueA
RegQueryInfoKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA

shell32

SHGetFolderPathA
ShellExecuteA

ole32

CoCreateGuid
CoInitializeEx
CoCreateInstance

oleaut32

SysFreeString
SysAllocString
VariantClear
GetErrorInfo
VariantInit

netapi32

Netbios

wininet

HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetCloseHandle
InternetOpenA
InternetReadFile

userenv

GetProfilesDirectoryA

urlmon

CreateURLMoniker

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2fbe1f84e2e67ce14d8b806931ab3841

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

netapi32

wininet

userenv

urlmon

Sections

.text Size: 148KB - Virtual size: 147KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 8KB - Virtual size: 23KB

.text
Size: 148KB - Virtual size: 147KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 8KB - Virtual size: 23KB