597f7c7dea4d318bdab40158490f504a9c62a3f5691984ee26c7ebb92cce39d8

Resubmissions

28/10/2022, 20:15

221028-y1h7waebhp 4

01/02/2022, 00:05

220201-addf4sedf6 8

Sharing

Copy URL Twitter E-mail

General

Target

597f7c7dea4d318bdab40158490f504a9c62a3f5691984ee26c7ebb92cce39d8
Size

14KB
MD5

5e9dcfb6141d521b6f2b16ab0dbe237e
SHA1

ec3e863c38c88d1e05f833aa7693a8abb409fe5a
SHA256

597f7c7dea4d318bdab40158490f504a9c62a3f5691984ee26c7ebb92cce39d8
SHA512

e831eb202c1b162c15b2ec5ccc0305a4511c05a763e046b1c27ccc910bf43338307e869c63a1fda6464114ec6265536fb4ddcb844596dc88822d1ed25fa16822
SSDEEP

192:wk1AJN2nWdIJKsmRESwfXslNjRGZsP1oynK7UyqYUMt3BK16hY6FHD:JAGnbG9lNoZy107UrE3O2H

Score

N/A

Malware Config

Signatures

Files

597f7c7dea4d318bdab40158490f504a9c62a3f5691984ee26c7ebb92cce39d8
.exe windows x86

f062a67c00d1234271d5c389edae36eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
srand
rand
strchr
strcmp
memset
wcscat
wcsstr
wcscpy
_wfopen
fwprintf
fclose

shlwapi

StrCmpNW
PathFileExistsW
PathFindFileNameW

urlmon

URLDownloadToFileW

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

kernel32

OpenProcess
TerminateProcess
Process32Next
ExpandEnvironmentStringsW
FindFirstFileW
SetCurrentDirectoryW
GetFullPathNameW
SetFileAttributesW
Process32First
FindClose
GetLogicalDrives
GetDriveTypeW
QueryDosDeviceW
lstrcpyW
GetProcessHeap
WriteFile
DeleteFileW
CreateToolhelp32Snapshot
ExitProcess
Sleep
CreateThread
GetTickCount
GetLastError
CreateMutexA
GetModuleHandleA
GetStartupInfoA
HeapAlloc
FindNextFileW
CloseHandle
UnmapViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingW
CreateFileW

user32

wsprintfA
wsprintfW
CharLowerA
CharLowerW

advapi32

CryptDestroyKey
CryptEncrypt
CryptSignHashA
CryptHashData
CryptCreateHash
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
CryptAcquireContextW
CryptImportKey

shell32

ShellExecuteA

ole32

CoInitializeEx

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 746B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

f062a67c00d1234271d5c389edae36eb

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

shlwapi

urlmon

wininet

kernel32

user32

advapi32

shell32

ole32

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 496B

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 1024B - Virtual size: 746B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 496B

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 1024B - Virtual size: 746B