a787fb2320274ff9685f32ab7c8b026965d5fa7307e90a6f84df1ac7b2ba8aa2

Sharing

Copy URL Twitter E-mail

General

Target

a787fb2320274ff9685f32ab7c8b026965d5fa7307e90a6f84df1ac7b2ba8aa2
Size

120KB
MD5

965ca3eb623a31ceb225d03879734dc1
SHA1

c064757c59bb5ac8d3be08b3044ecdd660217389
SHA256

a787fb2320274ff9685f32ab7c8b026965d5fa7307e90a6f84df1ac7b2ba8aa2
SHA512

9e18696dc7a6cd18c9493285b1f7fc564b95372c969c0238f82698345a563f97f54eaad529f9609ba9ba37f72225b7a25b3e1d0f58f879c9a88ba0db8cac1ede
SSDEEP

1536:iCnSDZmH/oMJKXId+L8BCPAV2D05KH4Nu7szkNIKaZ8oo9V0LTf+4heUf8W94U8J:umpki8oo3uTp8WU6bB3NxotFDX

Score

N/A

Malware Config

Signatures

Files

a787fb2320274ff9685f32ab7c8b026965d5fa7307e90a6f84df1ac7b2ba8aa2
.exe windows x86

b0c2c4b3fa8d74eb9026bfb0a5556ffa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsA
WinExec
GetWindowsDirectoryA
FormatMessageA
GetCurrentProcess
GetVersionExA
GetLastError
GetVersion
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleFileNameA
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
CloseHandle
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
HeapAlloc
FreeEnvironmentStringsA
FreeEnvironmentStringsW
HeapFree
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
WriteFile
SetFilePointer
GetACP
GetStringTypeW
GetCPInfo
GetOEMCP

user32

wsprintfA
MessageBoxA

advapi32

RegEnumKeyExA
RegCreateKeyExA
AdjustTokenPrivileges
RegSetValueExA
RegCloseKey
RegCreateKeyA
RegQueryValueExA
RegLoadKeyA
RegDeleteValueA
OpenProcessToken
RegOpenKeyExA
LookupPrivilegeValueA
RegUnLoadKeyA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

winmm

midiOutGetNumDevs
midiOutGetDevCapsA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0c2c4b3fa8d74eb9026bfb0a5556ffa

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

winmm

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 8KB - Virtual size: 13KB

Size: 60KB - Virtual size: 57KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 4KB - Virtual size: 1KB