a4f2be957b410cd21920baa3c8aa9358b51335b74194b5a3a67ff10ebd363c62

Sharing

Copy URL Twitter E-mail

General

Target

a4f2be957b410cd21920baa3c8aa9358b51335b74194b5a3a67ff10ebd363c62
Size

468KB
MD5

7954e1c1abf42d2ab83ac2dd74556219
SHA1

72f3cdb3d782e9ff02671509a9622aafcf9cdec3
SHA256

a4f2be957b410cd21920baa3c8aa9358b51335b74194b5a3a67ff10ebd363c62
SHA512

63568287a5d6d0a050a652270c5f7d16277c3fd7e8f6957310228b0221df6f0fdd42f8de10afab57431e4fe8f38e609ec053963d874354cd2300e5a64167fc1e
SSDEEP

6144:P9HAvrVSeJAdh/UIlJbw8NTnqTyHt41sttxFazGmCB0PzWzlF+eDRhGaQkkYmTB7:P95ey1YhTyN41stthmC3ZTRhxk1f

Score

N/A

Malware Config

Signatures

Files

a4f2be957b410cd21920baa3c8aa9358b51335b74194b5a3a67ff10ebd363c62
.dll windows x86

d75f1d9f7517b947862ad5f98b874745

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shfolder

SHGetFolderPathA

kernel32

IsBadWritePtr
MultiByteToWideChar
lstrlenA
FindClose
FindFirstFileA
lstrcatA
DeleteFileA
OutputDebugStringA
SetFileAttributesA
LoadLibraryA
CreateDirectoryA
GetSystemDefaultLangID
RemoveDirectoryA
FindNextFileA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetProcAddress
FreeLibrary
GetVersionExA
GetVersion
GetDriveTypeA
GetLastError
InterlockedDecrement
SetEndOfFile
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetLocaleInfoA
GetModuleFileNameA
WideCharToMultiByte
LockResource
LoadResource
FindResourceA
Sleep
LocalFree
LocalAlloc
CloseHandle
ReadFile
GetFileSize
CreateFileA
SetCurrentDirectoryA
GetCurrentDirectoryA
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
GetFullPathNameA
InterlockedIncrement
RtlUnwind
RaiseException
GetCommandLineA
FileTimeToSystemTime
FileTimeToLocalFileTime
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCPInfo
GetACP
GetOEMCP
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
LCMapStringA
LCMapStringW
VirtualAlloc
GetStringTypeA
GetStringTypeW
SetFilePointer
FlushFileBuffers

user32

LoadStringA

oleaut32

SysAllocString

advapi32

RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA

ole32

CoUninitialize
CoCreateInstance
CoInitialize

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

shlwapi

SHDeleteKeyA

Exports

Exports

CreateShortCuts
CreateShortCutsDebug
CreateShortCutsExt1
CreateShortCutsExt1Debug
CreateShortCutsExt2
CreateShortCutsExt3
GetApplicationDatabase
GetDocumentDatabase
GetInstallableProgramName
GetSerialNumberSummary
GetShortCutInterfaceVersion
KillShortCuts
KillShortCutsExt1
KillShortCutsExt2
SetProgramUILanguage
SetShortCutsLanguage

Sections

.text
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d75f1d9f7517b947862ad5f98b874745

Headers

File Characteristics

Imports

shfolder

kernel32

user32

oleaut32

advapi32

ole32

version

shlwapi

Exports

Exports

Sections

.text Size: 160KB - Virtual size: 159KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 44KB - Virtual size: 48KB

.rsrc Size: 156KB - Virtual size: 152KB

.reloc Size: 16KB - Virtual size: 14KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 160KB - Virtual size: 159KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 44KB - Virtual size: 48KB

.rsrc
Size: 156KB - Virtual size: 152KB

.reloc
Size: 16KB - Virtual size: 14KB

.rmnet
Size: 60KB - Virtual size: 60KB