9f74ef453a6f17a0342120a5201824c99b242bfd4be25f5aaf2d1edf1daf7da4

Sharing

Copy URL Twitter E-mail

General

Target

9f74ef453a6f17a0342120a5201824c99b242bfd4be25f5aaf2d1edf1daf7da4
Size

159KB
MD5

0c016f42a57c11aa70dd10ccebe691d0
SHA1

cb9143ffb77a3d64e2728b9e15e0fa1b67dfe54d
SHA256

9f74ef453a6f17a0342120a5201824c99b242bfd4be25f5aaf2d1edf1daf7da4
SHA512

2ce8a229a829f877fe1cc8bf37abd70143d8575a0377ad55c42c75b3654559b171257ab6bebdcbad422d1b64eaa48384593838b969549167f084db1be999f843
SSDEEP

3072:6C82i8CpsbU0vrreHZAzIWswpHh7tiuEOShNNy4esIgAnRL:6CFiJsbtzXd2D/N0aARL

Score

N/A

Malware Config

Signatures

Files

9f74ef453a6f17a0342120a5201824c99b242bfd4be25f5aaf2d1edf1daf7da4
.exe windows x86

f3fad95e43c8f6135132a6405c88bc02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

GetFileAttributesW
GetFullPathNameW
Sleep
FindResourceW
CreateProcessW
CreateDirectoryW
SizeofResource
CreateFileW
LockResource
WriteFile
MoveFileExW
GetFileSize
SetFilePointer
FindResourceExW
SetEndOfFile
CloseHandle
GetLastError
CopyFileW
DeleteFileW
GetTickCount
CreateFileA
WriteConsoleW
MoveFileW
CompareStringA
CompareStringW
SetEnvironmentVariableA
LoadResource
SetUnhandledExceptionFilter
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
ExitProcess
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WideCharToMultiByte
GetTimeZoneInformation
GetStdHandle
GetModuleFileNameA
LoadLibraryA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
VirtualAlloc
RtlUnwind
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers

user32

GetDesktopWindow
UnregisterClassA

advapi32

RegCreateKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW

shell32

SHCreateDirectoryExW
SHFileOperationW
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderLocation

shlwapi

PathFileExistsW

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f3fad95e43c8f6135132a6405c88bc02

Headers

File Characteristics

Imports

version

kernel32

user32

advapi32

shell32

shlwapi

Sections

.text Size: 63KB - Virtual size: 62KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 69KB - Virtual size: 72KB

.text
Size: 63KB - Virtual size: 62KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 69KB - Virtual size: 72KB