db907f9531b2e2597392518ac91370b0da586aa09e73172ee58dc9e7d0e2133a

Sharing

Copy URL Twitter E-mail

General

Target

db907f9531b2e2597392518ac91370b0da586aa09e73172ee58dc9e7d0e2133a
Size

157KB
MD5

0b5723bc086061e2fb53067bf1dd8c01
SHA1

b39519efa17e9d9daf0a40c8cedc99e2722b95be
SHA256

db907f9531b2e2597392518ac91370b0da586aa09e73172ee58dc9e7d0e2133a
SHA512

218cd4bdc51a1affa0847532776d418e90c3d6637f33e729dd5ea4dba29c4445d958c36a4afca742d74d00a3d3d6b6d32d207a90f46d830ec444ad18377c4b06
SSDEEP

3072:TW/UUOXF83N3QsmJlolqmqSXhnY+o/C9zN15BKXjRhyjkqv3kb:C/UbXF83N35ETwYniBYDyjp0b

Score

N/A

Malware Config

Signatures

Files

db907f9531b2e2597392518ac91370b0da586aa09e73172ee58dc9e7d0e2133a
.exe windows x86

bf7f584595954a98cb620e4ad7ea4ca9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

shlwapi

PathFileExistsA
PathAddBackslashA
PathRemoveFileSpecA
PathRemoveBackslashA

kernel32

GetLastError
GetCurrentProcess
GetModuleFileNameA
CloseHandle
WaitForSingleObject
LocalFree
FormatMessageA
GetPrivateProfileStringA
GetVersion
GlobalAlloc
GetPrivateProfileIntA
WritePrivateProfileStructA
WritePrivateProfileStringA
GetVersionExA
IsBadCodePtr
IsBadReadPtr
SetFilePointer
InterlockedExchange
GlobalFree
LoadLibraryA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FlushFileBuffers
SetStdHandle
GetPrivateProfileStructA
GetCommandLineA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
HeapReAlloc
ExitProcess
GetProcAddress
TerminateProcess
HeapSize
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr

user32

TranslateMessage
PeekMessageA
DispatchMessageA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteExA

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bf7f584595954a98cb620e4ad7ea4ca9

Headers

File Characteristics

Imports

version

shlwapi

kernel32

user32

advapi32

shell32

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 96KB - Virtual size: 96KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 96KB - Virtual size: 96KB