1f2b7880644f0d97fd98249bcc396f13dc4d5592d4065c0e48a023fe5e3b230b

Sharing

Copy URL Twitter E-mail

General

Target

1f2b7880644f0d97fd98249bcc396f13dc4d5592d4065c0e48a023fe5e3b230b
Size

200KB
MD5

5ce92fd50996ee39565ea93a4f649df0
SHA1

eb5026475a3caa1722b7547397fb8d36e06ce779
SHA256

1f2b7880644f0d97fd98249bcc396f13dc4d5592d4065c0e48a023fe5e3b230b
SHA512

5695358aad5717ab3e5aacc14dc09fa38020860a1f799bc79b13a50f0a83a2837fed9427456d0613117f1be8d8c1211e5edc038299d2914a3a562777bce3a382
SSDEEP

6144:APN/F7Jy/KVRUXuEgp0nwlJbb9jBCOpVugaS7D:U/F7JzJ/dVr

Score

N/A

Malware Config

Signatures

Files

1f2b7880644f0d97fd98249bcc396f13dc4d5592d4065c0e48a023fe5e3b230b
.exe windows x86

2dfd5707346fc4407492e0dba9cc2f9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
InitializeCriticalSection
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetModuleHandleW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
ExitProcess
GetModuleHandleA
GetVersionExA
SetErrorMode
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetVersion
CreateFileA
SetEndOfFile
SetFileTime
SetFilePointer
GetFileSize
GlobalMemoryStatus
GetSystemInfo
CreateEventW
GetExitCodeThread
GetThreadPriority
SetThreadPriority
GetProcAddress
CreateMutexW
GetCurrentThreadId
PulseEvent
SetEvent
ResetEvent
LeaveCriticalSection
EnterCriticalSection
GetLogicalDrives
GetDriveTypeW
GetVolumeInformationW
CreateFileW
DeviceIoControl
GetTimeZoneInformation
SystemTimeToFileTime
LocalFileTimeToFileTime
GetTimeFormatW
GetDateFormatW
LoadLibraryW
GetTempPathW
GetModuleFileNameW
CopyFileExW
CopyFileW
MoveFileExW
MoveFileW
RemoveDirectoryW
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
SetFileAttributesW
DeleteFileW
GetLastError
GetFileAttributesW
MulDiv
FindFirstFileW
LoadLibraryExW
FindNextFileW
FindClose
FreeLibrary
InterlockedDecrement
InterlockedIncrement
CloseHandle
GetStdHandle
WriteFile
ReadFile
ReleaseMutex
MultiByteToWideChar
Sleep

user32

GetActiveWindow
EnableWindow

ole32

CoTaskMemFree
StringFromGUID2
CoCreateGuid
CoInitializeEx
CoUninitialize

msvcp71

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?_Nomemory@std@@YAXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

shlwapi

StrRetToStrW
SHDeleteKeyW
SHDeleteValueW
PathIsDirectoryW

msvcr71

exit
__p___winitenv
_amsg_exit
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
_cexit
__p__fmode
__set_app_type
?terminate@@YAXXZ
__security_error_handler
_controlfp
??3@YAXPAX@Z
_XcptFilter
_exit
_c_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
memset
_callnewh
wcstombs
islower
toupper
iswlower
towupper
memmove
_endthreadex
_beginthreadex
setlocale
wcsncmp
_mktime64
_time64
swscanf
_localtime64
wcsftime
ceil
_wopen
_close
isalpha
_wmkdir
_errno
_wcsicoll
iswspace
_wcsnicmp
swprintf
calloc
_wstat64
modf
floor
__CxxFrameHandler
realloc
malloc
_vsnwprintf
wcsrchr
wcschr
wcsncpy
wcscpy
wcslen
free
_except_handler3
_CxxThrowException
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
wcscmp
_get_heap_handle
_set_sbh_threshold
_control87
__p__commode
_purecall
_wcsicmp

gdi32

CreateDIBSection
DeleteDC
CreateCompatibleDC
DeleteObject

advapi32

RegCloseKey
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegEnumValueW
RegEnumKeyExW

shell32

SHGetPathFromIDListW
SHGetMalloc
SHFileOperationW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetFolderLocation

Sections

.text
Size: 136KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2dfd5707346fc4407492e0dba9cc2f9c

Headers

File Characteristics

Imports

kernel32

user32

ole32

msvcp71

shlwapi

msvcr71

gdi32

advapi32

shell32

Sections

.text Size: 136KB - Virtual size: 132KB

.rdata Size: 32KB - Virtual size: 28KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 136KB - Virtual size: 132KB

.rdata
Size: 32KB - Virtual size: 28KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 1KB