c8edf77f9676ec67bfb2373b46ad2a6bb6d7833567ba648ab2f39859d386d70c

Sharing

Copy URL Twitter E-mail

General

Target

c8edf77f9676ec67bfb2373b46ad2a6bb6d7833567ba648ab2f39859d386d70c
Size

688KB
MD5

724b45683b33ee4dc4c8498e7b083605
SHA1

632f871df29808d1e45890b0118e983f707c69b0
SHA256

c8edf77f9676ec67bfb2373b46ad2a6bb6d7833567ba648ab2f39859d386d70c
SHA512

ea03235b977fd10ba46202086fe1f6518f228fb18ebd30d377c9f0041369a8f7076e669c67bec6fe32411b4987f0bb974fd8bc64dfa5bdd4fc9f72b1448d6401
SSDEEP

12288:EeJsjvddUrFQBkFFEpEA9IHvr1J8NlbU05Wf9/+sqUQKeWlbVqvx:mjvddUrFQBkFapor1KNlQ4WF/+sqmxA

Score

N/A

Malware Config

Signatures

Files

c8edf77f9676ec67bfb2373b46ad2a6bb6d7833567ba648ab2f39859d386d70c
.exe windows x86

ff4868d4780adbd8872d18173df22184

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memmove
strchr
strstr
_wcsupr
iswalnum
iswalpha
malloc
_itow
_wtol
_wcsnicmp
_wtoi
_vsnwprintf
_onexit
__dllonexit
_vsnprintf
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
swscanf
free
mbstowcs
wcscmp
wcschr
_wcslwr
wcsrchr
wcsstr
??2@YAPAXI@Z
??3@YAXPAX@Z
wcslen
_wcsicmp
_controlfp

advapi32

RegQueryInfoKeyW
RegQueryValueExA
RegEnumKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
GetSecurityDescriptorDacl
GetSecurityDescriptorControl
SetNamedSecurityInfoW
RegOpenKeyExA

kernel32

GetFileAttributesA
GetVersionExW
GetVersionExA
GetTimeZoneInformation
GetFileTime
CreateFileW
CopyFileW
GetExitCodeProcess
WaitForMultipleObjects
CreateProcessW
GetCommandLineW
GetFileSize
CreateFileA
GetWindowsDirectoryA
CreateDirectoryA
GetSystemDefaultLangID
SetEndOfFile
LocalFree
SetLastError
GetProcAddress
GetModuleHandleA
SetFilePointer
GetFileAttributesW
GetSystemDirectoryW
CreateDirectoryW
RemoveDirectoryW
MoveFileExW
GetLastError
CloseHandle
GetWindowsDirectoryW
FileTimeToSystemTime
GetSystemTimeAsFileTime
WriteProfileStringW
ExpandEnvironmentStringsW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetSystemWindowsDirectoryW
GetProfileStringW
SetFileAttributesW
GetShortPathNameW
FindClose
FindNextFileW
FindFirstFileW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetModuleHandleW
FreeLibrary
lstrlenW
LoadLibraryExW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoA
MoveFileW
LoadLibraryW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetTempPathW
GetLongPathNameW
GetLocalTime
DeleteFileW
WriteFile

user32

LoadStringW
CharNextA
IsWindow
PostMessageW

ole32

OleUninitialize
CoInitialize
CoUninitialize
CoCreateInstance
CoCreateGuid
StringFromGUID2
OleInitialize

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

shell32

SHGetSpecialFolderLocation
SHGetMalloc
SHChangeNotify
SHSetLocalizedName
SHGetSpecialFolderPathW
SHGetPathFromIDListA
ShellExecuteW
SHGetPathFromIDListW

shlwapi

PathIsDirectoryW
PathAppendW
PathRemoveFileSpecW
PathAddBackslashA
PathAddBackslashW
PathRemoveBlanksW

Sections

.text
Size: 164KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 500KB - Virtual size: 1.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ff4868d4780adbd8872d18173df22184

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

user32

ole32

oleaut32

version

shell32

shlwapi

Sections

.text Size: 164KB - Virtual size: 162KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 16KB - Virtual size: 15KB

.vmp0 Size: 500KB - Virtual size: 1.6MB

.text
Size: 164KB - Virtual size: 162KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 16KB - Virtual size: 15KB

.vmp0
Size: 500KB - Virtual size: 1.6MB