ab0e7760a4f9a122d34b7b468e4fd61763ed93614983ea2870635073abf77f3a

Sharing

Copy URL Twitter E-mail

General

Target

ab0e7760a4f9a122d34b7b468e4fd61763ed93614983ea2870635073abf77f3a
Size

118KB
MD5

e16ec1a77f8a43b7af448cec199d7859
SHA1

4b827db565d71488ed471c96c432fdf5b5c4a45a
SHA256

ab0e7760a4f9a122d34b7b468e4fd61763ed93614983ea2870635073abf77f3a
SHA512

a699885f91201ea4dcf6d5f7fab3f6c923580f1adf9d54d2d7397e13c39e09e8fb5e237891757f7295d67d1eb915461ad820e502e1fa5cbc09d636398846a3da
SSDEEP

3072:p+QLFWonpmnyUknjxBGgd9nrsFesPFli4CP26jcgLoF:pbFVnpmn/+OgPnAEstxj6jcgoF

Score

N/A

Malware Config

Signatures

Files

ab0e7760a4f9a122d34b7b468e4fd61763ed93614983ea2870635073abf77f3a
.exe windows x86

9a270604dfaf1fe8d2c9e5bcbf9ac62e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
LoadLibraryW
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
lstrlenW
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
GlobalUnlock
GlobalLock
LeaveCriticalSection
EnterCriticalSection
InterlockedCompareExchange
lstrcpynW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
CloseHandle
InitializeCriticalSection
Sleep
GetCurrentThreadId
CreateThread
CreateEventW
SetEvent
GetCommandLineW
GetSystemDirectoryW
LoadLibraryA
RaiseException
GetVersionExW
LocalAlloc
GetVersionExA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersion
GetFileAttributesW
GetModuleHandleA
GetProcAddress
GetModuleHandleW
WaitForSingleObject

user32

PeekMessageW
CharNextW
SendMessageW
SetParent
ShowWindow
CharUpperW
DispatchMessageW
TranslateMessage
CreateWindowExW
DefWindowProcW
EnableWindow
RegisterClassExW
PostThreadMessageW
GetMessageW

advapi32

RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegSetValueExW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
GetHGlobalFromStream
CreateStreamOnHGlobal
CoUninitialize
CoInitializeEx
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
StringFromGUID2
CoCreateInstance

msvcrt

__wgetmainargs
_controlfp
??1type_info@@UAE@XZ
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
memset
_amsg_exit
_wcmdln
_except_handler3
free
malloc
_CxxThrowException
wcslen
__CxxFrameHandler
realloc
_c_exit
_exit
_XcptFilter
_cexit
exit

shlwapi

PathFindExtensionW

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9a270604dfaf1fe8d2c9e5bcbf9ac62e

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

msvcrt

shlwapi

Sections

.text Size: 32KB - Virtual size: 32KB

.data Size: 512B - Virtual size: 844B

.rsrc Size: 5KB - Virtual size: 5KB

.mdata Size: 72KB - Virtual size: 72KB

.text
Size: 32KB - Virtual size: 32KB

.data
Size: 512B - Virtual size: 844B

.rsrc
Size: 5KB - Virtual size: 5KB

.mdata
Size: 72KB - Virtual size: 72KB