96b1c12c3509d1d81a3e63ed262814c307d432339b4d90c02b52b978e205e7e6

Sharing

Copy URL

Twitter E-mail

General

Target

96b1c12c3509d1d81a3e63ed262814c307d432339b4d90c02b52b978e205e7e6
Size

374KB
MD5

443dd3778ff95125c492e69c993db806
SHA1

4fb08da39366c26742bd2565747e1698d07754c3
SHA256

96b1c12c3509d1d81a3e63ed262814c307d432339b4d90c02b52b978e205e7e6
SHA512

ca36a3e818cab56db9d415d9316ea13446d09d377110fab3a9c0dd33212723c866248213790589847aa9ea1575a584d66e8d864c79715549b35ffea43e3d6de1
SSDEEP

6144:Q8eDqtNLHaYmZu65rk+0jsmfpakKSrcn7Xu7WXlOJA4mwQm6/o6v/p0eSKZHtaDb:QjqDLHYKrjsmfpak3rcnTbX0a/pkKZNx

Score

N/A

Malware Config

Signatures

Files

96b1c12c3509d1d81a3e63ed262814c307d432339b4d90c02b52b978e205e7e6
.exe windows x86

62259319d466feb21671064b67834c33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

GetUserNameA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA

kernel32

AddAtomA
CloseHandle
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileMappingA
CreateFileW
CreateThread
ExitProcess
FindAtomA
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FormatMessageA
FreeLibrary
GetAtomNameA
GetConsoleMode
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentVariableA
GetFileAttributesW
GetFileSize
GetFileTime
GetLastError
GetLocalTime
GetOverlappedResult
GetProcAddress
GetProcessTimes
GetStdHandle
GetSystemTime
GetSystemTimeAdjustment
GetThreadTimes
GetTickCount
GetVersionExA
GetWindowsDirectoryA
GlobalMemoryStatus
LoadLibraryA
LocalFree
MapViewOfFile
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
SetConsoleMode
SetCurrentDirectoryW
SetEvent
SetFilePointer
SetFileTime
SetUnhandledExceptionFilter
SystemTimeToFileTime
UnmapViewOfFile
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile

msvcrt

_strdup
_stricmp
_strnicmp
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_isctype
_onexit
_pctype
_setmode
_vsnprintf
abort
atexit
atoi
exit
fclose
fflush
fgetc
fgets
fopen
fprintf
fputc
fputs
fread
free
fwrite
getenv
malloc
memchr
memcpy
memmove
memset
printf
puts
qsort
realloc
remove
signal
sprintf
sscanf
strchr
strcmp
strcpy
strcspn
strftime
strlen
strncat
strncpy
strrchr
strspn
strtok
strtol
strtoul
system
time
tolower
ungetc

user32

FindWindowA
GetCapture
GetClipboardOwner
GetCursorPos
GetForegroundWindow
GetQueueStatus
SendMessageA

Sections

.text
Size: 254KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

62259319d466feb21671064b67834c33

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

Sections

.text Size: 254KB - Virtual size: 253KB

.data Size: 1024B - Virtual size: 960B

.rdata Size: 65KB - Virtual size: 65KB

.bss Size: - Virtual size: 14KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 49KB - Virtual size: 52KB

.text
Size: 254KB - Virtual size: 253KB

.data
Size: 1024B - Virtual size: 960B

.rdata
Size: 65KB - Virtual size: 65KB

.bss
Size: - Virtual size: 14KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 49KB - Virtual size: 52KB