4332d89c81dc65cf6285bd1be0d987a176a0434f4ac91282372d658fb0008971

Sharing

Copy URL Twitter E-mail

General

Target

4332d89c81dc65cf6285bd1be0d987a176a0434f4ac91282372d658fb0008971
Size

128KB
MD5

81385c2f8854a25370ee84aad3c63478
SHA1

47db1bac06c366340261072551a6dfdd857007c6
SHA256

4332d89c81dc65cf6285bd1be0d987a176a0434f4ac91282372d658fb0008971
SHA512

04cf4a65fcff7f280057a694fdd150a538d25f33e1971670cf31d1d698e00f77b44a22f5d2ccf8c6a73d94e4708ae618db7f3c223a57966378faf9328bb8ad43
SSDEEP

1536:un0oyTtroWycay/brtUpjaYKp8g6LCLFelFKKjgz1sIgXW80xZmsdA8PId:J5oWycVeWZUCYlaUaZmsZPId

Score

N/A

Malware Config

Signatures

Files

4332d89c81dc65cf6285bd1be0d987a176a0434f4ac91282372d658fb0008971
.exe windows x86

2b050a9a76bab0f5216087e93aa56c5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateFileA
lstrcatA
CloseHandle
GetDiskFreeSpaceExA
CreateDirectoryA
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
WinExec
FreeLibrary
lstrlenA
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
lstrcmpiA
lstrcpyA
SetErrorMode
LoadLibraryA
GlobalUnlock
GlobalAlloc
GlobalLock
SetHandleCount
GlobalFree
GetStdHandle
GetEnvironmentStringsW
MultiByteToWideChar

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

EndPaint
BeginPaint
PostQuitMessage
wsprintfA
DefWindowProcA
ReleaseDC
GetDC
MoveWindow
MessageBeep
FindWindowA
LoadIconA
RegisterClassA
CreateWindowExA
SendMessageA
PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
GetSystemMetrics
GetWindowRect
LoadCursorA

gdi32

GetStockObject
SetTextColor
SetBkMode
TextOutA
CreateFontA
SelectObject
DeleteObject

ole32

OleInitialize
OleUninitialize

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nrdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2b050a9a76bab0f5216087e93aa56c5c

Headers

File Characteristics

Imports

kernel32

advapi32

user32

gdi32

ole32

shell32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 7KB

.rsrc Size: 20KB - Virtual size: 18KB

.nrdata Size: 72KB - Virtual size: 72KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 20KB - Virtual size: 18KB

.nrdata
Size: 72KB - Virtual size: 72KB