213cad67afdd04de3fb1e44acdec6d0a59c4cd1eb3eab7da7b72ea829253b35a

General

Target

213cad67afdd04de3fb1e44acdec6d0a59c4cd1eb3eab7da7b72ea829253b35a
Size

16KB
MD5

84042f6977deea0be4d777650686071f
SHA1

354e3854e4d062f7c39a013085c9bf8d3193ba49
SHA256

213cad67afdd04de3fb1e44acdec6d0a59c4cd1eb3eab7da7b72ea829253b35a
SHA512

8cdc4644404a2411d28274f6291fa86d381ba6192a9b4ea9c6357e1b5c7df34daf0c04c5141c130cc2b5ce284534671410a6c2ae1cd8ee500523b21175b1be28
SSDEEP

384:b0FJK4yCBcnQMTvdR0bnAZoh7CkHR6pT3lmeC:XnC+nQMTMrAKhCpLlfC

Score

N/A

Malware Config

Signatures

Files

213cad67afdd04de3fb1e44acdec6d0a59c4cd1eb3eab7da7b72ea829253b35a
.exe windows x86

ad6c08a594d90bb0bb4e9d3ef1a5f3c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrStrIA
StrToIntExA

kernel32

GetShortPathNameA
MoveFileExA
GetVersionExA
SetLastError
InterlockedExchange
GetLastError
InitializeCriticalSection
DeleteCriticalSection
lstrlenA
lstrcatA
lstrcpyA
GetSystemDirectoryA
GetFileAttributesA
CloseHandle
WriteFile
CreateFileA
GetProcAddress
GetModuleHandleA
GetPrivateProfileSectionA
UnmapViewOfFile
FreeLibrary
MapViewOfFile
OpenFileMappingA
Sleep
DeleteFileA
GetModuleFileNameA
SetEvent
OpenEventA
ExitProcess
LoadLibraryA
CreateEventA
GetCurrentProcessId
ResetEvent
VirtualProtect
GetTickCount
QueryPerformanceCounter
HeapSize
RtlUnwind
GetCurrentProcess
WritePrivateProfileSectionA
GetCurrentThreadId
GetSystemTimeAsFileTime
IsBadStringPtrA
HeapAlloc
HeapFree
VirtualAlloc
VirtualQuery
VirtualFree
HeapReAlloc
TerminateProcess

user32

wsprintfA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad6c08a594d90bb0bb4e9d3ef1a5f3c7

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

advapi32

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 2KB

.rsrc Size: 84KB - Virtual size: 84KB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 2KB

.rsrc
Size: 84KB - Virtual size: 84KB