b1972848ed153f02b86895cab6d9e14c87a76612d47002bf9db32443428eec05

Sharing

Copy URL Twitter E-mail

General

Target

b1972848ed153f02b86895cab6d9e14c87a76612d47002bf9db32443428eec05
Size

217KB
MD5

83c0ea3ad0466a0fd825b256bcb6837e
SHA1

6c61af374ca021660bb83ae557de79c31b9382c0
SHA256

b1972848ed153f02b86895cab6d9e14c87a76612d47002bf9db32443428eec05
SHA512

6c156fc18f326f33fd607919e7795d46cf6aa4549582e662e29ef65b470dbad8e636e128be9e97a60cebd13d5606465a9a1712f44ec509a4ff578303f685c5ba
SSDEEP

6144:kO75QxzjeH1lOY5nM0T7yIysntvbD8GpAtLIM8p:kOFQxzjeR9yA3KK

Score

N/A

Malware Config

Signatures

Files

b1972848ed153f02b86895cab6d9e14c87a76612d47002bf9db32443428eec05
.exe windows x86

7ecfeefb9eba0c7271b2274d831c438f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

acrodistdll

_DistCancelJob@0
_DistInitialize@36
_DistMain@16
_DistBeginFileJob@16
_DistTerminate@0

kernel32

FindFirstFileW
FindFirstFileA
GetFileAttributesW
GetTickCount
FindClose
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProfileStringA
GetProfileStringW
GetModuleFileNameA
DebugBreak
GetModuleHandleW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
GetCurrentThreadId
lstrcmpiW
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrlenW
GetModuleFileNameW
GetLastError
FormatMessageW
LocalFree
LoadLibraryW
GetProcAddress
FreeLibrary
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
Sleep
GetVersionExA

user32

MessageBoxW
CharNextW
LoadStringW
PostMessageW
UnregisterClassA
PostThreadMessageW
wsprintfW
DispatchMessageW
GetMessageW
TranslateMessage

advapi32

RegQueryValueExW
RegOpenKeyW
RegDeleteKeyW
RegQueryInfoKeyW
CloseServiceHandle
RegEnumKeyW
RegQueryValueExA
RegQueryValueA
RegOpenKeyA
RegQueryValueW
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
SetServiceStatus
RegisterEventSourceW
ReportEventW
DeregisterEventSource
ControlService
DeleteService
CreateServiceW
OpenSCManagerW
OpenServiceW
RegCloseKey

ole32

CoTaskMemAlloc
CoTaskMemRealloc
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateInstance
StringFromGUID2

oleaut32

VariantInit
LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SysStringLen
UnRegisterTypeLi
SetErrorInfo
VariantClear
VariantChangeType
GetErrorInfo
CreateErrorInfo

msvcr80

wcsrchr
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
??3@YAXPAX@Z
memcmp
wcscat
wcslen
memset
free
wcscpy
malloc
_putws
_vswprintf
memcpy_s
wcscpy_s
wcsncpy_s
wcscat_s
??_V@YAXPAX@Z
_purecall
_recalloc
calloc
??_U@YAPAXI@Z
_resetstkoflw
??2@YAPAXI@Z
wcsstr
wcschr
strstr
strchr
strcpy
_controlfp_s
_stricmp
_wcsicmp
_wcsupr
_strupr
wcstoul
wcscmp
_wsetlocale
strlen
strrchr
memmove_s
_CxxThrowException
_except_handler4_common
_unlock
_encode_pointer
__dllonexit
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7ecfeefb9eba0c7271b2274d831c438f

Headers

File Characteristics

Imports

acrodistdll

kernel32

user32

advapi32

ole32

oleaut32

msvcr80

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 8KB - Virtual size: 5KB

.rsrc Size: 136KB - Virtual size: 136KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 136KB - Virtual size: 136KB