54f070de4874330b6193a0953876b88f66486f63050381605cd43acbaa9d4f5e

Sharing

Copy URL

Twitter E-mail

General

Target

54f070de4874330b6193a0953876b88f66486f63050381605cd43acbaa9d4f5e
Size

1.4MB
MD5

02ba38a70593d97ccae30d425b7c0666
SHA1

aa2b9da6e69510af4714e00d802fb493c0e2fefc
SHA256

54f070de4874330b6193a0953876b88f66486f63050381605cd43acbaa9d4f5e
SHA512

325f412b250199ce25898375b1dcfe2419216a603f421ca29c44dd62221df5393a317a599f27e9abc0fec732e084acb539d78752d7b7c0a9134abc4ee77e351a
SSDEEP

24576:rw7A9/oMAoViBr1uFe2I5US8JRsKmHra9Kw9c7yQS5CbQXsmLnfLIL2OdB5z0O6:rB9/eo46VfmH6K0MyH56CsmTzFY10O6

Score

N/A

Malware Config

Signatures

Files

54f070de4874330b6193a0953876b88f66486f63050381605cd43acbaa9d4f5e
.exe windows x86

ac3bb8f853c740307c1f49f210831522

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
WriteFile
CloseHandle
SetFilePointer
FileTimeToSystemTime
GetWindowsDirectoryA
Sleep
SetFileAttributesA
GetFileAttributesA
FileTimeToLocalFileTime
FindClose
DeleteFileA
CopyFileA
GetSystemDirectoryA
SetCurrentDirectoryA
RemoveDirectoryA
MulDiv
SetFileTime
GetTempPathA
GetModuleFileNameA
FindFirstFileA
CreateDirectoryA
TerminateProcess
ExitProcess
LCMapStringW
LCMapStringA
LoadLibraryA
GetProcAddress
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetLastError
CreateFileA
GetCurrentProcess
HeapSize
SetHandleCount
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
HeapReAlloc
GetFileType
GetStdHandle
GetOEMCP
GetEnvironmentStrings
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP

user32

SetFocus
wsprintfA
MessageBoxA
SendMessageA
DdeDisconnect
DdeInitializeA
DdeCreateStringHandleA
DdeConnect
DdeFreeStringHandle
DdeUninitialize
DdeClientTransaction
DialogBoxParamA
GetDlgItem
GetWindowTextA
EndDialog
SetWindowTextA
ShowWindow

advapi32

RegOpenKeyA
RegDeleteKeyA
RegCloseKey

shell32

ShellExecuteA

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac3bb8f853c740307c1f49f210831522

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 30KB - Virtual size: 30KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 10KB - Virtual size: 13KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 30KB - Virtual size: 30KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 10KB - Virtual size: 13KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB