1d41da4d80125e3a55b31ae61dcef2ce2ba32d209b1b244c25953573e82d532f

Sharing

Copy URL Twitter E-mail

General

Target

1d41da4d80125e3a55b31ae61dcef2ce2ba32d209b1b244c25953573e82d532f
Size

23KB
MD5

849c8da7dce973171a98426f1a59d768
SHA1

9590dc91ef84005d9c992b0dc3e88ee1147c97fa
SHA256

1d41da4d80125e3a55b31ae61dcef2ce2ba32d209b1b244c25953573e82d532f
SHA512

adec14806ac6c4d81dba033108594e1665dfca7cd1ed23a33c8e92861f3c5d78478e8e9f2cce859c161fa7a61d218c0c3aa61da26263d1b60d7f488d9b00eb49
SSDEEP

384:ExsuNKXE6x47pSxn/U5xqL6tU5jibfkcVd1QXHGOB:Ex54Ee4kns5xqQU5jkfkcVmB

Score

N/A

Malware Config

Signatures

Files

1d41da4d80125e3a55b31ae61dcef2ce2ba32d209b1b244c25953573e82d532f
.exe windows x86

e544d9b5542eada7b7e5e36f539d7ad0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
Sleep
LoadLibraryExW
GetModuleHandleW
GetCommandLineW
FormatMessageW
FreeLibrary
CreateEventW
WaitForSingleObject
CloseHandle
SetThreadPriority
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetVersionExA

advapi32

LookupAccountSidW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
NotifyChangeEventLog
OpenEventLogW
GetOldestEventLogRecord
GetNumberOfEventLogRecords
CloseEventLog
ReadEventLogW

shlwapi

PathFileExistsW

mfc71u

ord265
ord6284
ord5319
ord5621
ord1430
ord3382
ord629
ord266
ord757
ord3990
ord577
ord774
ord4100
ord2261
ord5342
ord5091
ord870
ord2311
ord293
ord280
ord1479
ord2895
ord6111
ord282
ord2926
ord1472
ord283
ord287
ord5711
ord2697
ord776
ord4101
ord6166
ord6172
ord5485
ord5558
ord899
ord777
ord4026
ord6173
ord896
ord5083
ord1197
ord566
ord764
ord557
ord745
ord380
ord3195
ord5489
ord1176
ord556
ord1443
ord744
ord384

msvcr71

__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_cexit
exit
__p___winitenv
_amsg_exit
__wgetmainargs
free
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__security_error_handler
_controlfp
_endthread
_except_handler3
memset
_beginthread
_initterm
wcslen
_wtoi
getenv
_wmkdir
_wgetenv
_localtime64
wcsftime
wprintf
__CxxFrameHandler
wcscpy
_wtol

msvcp71

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e544d9b5542eada7b7e5e36f539d7ad0

Headers

File Characteristics

Imports

kernel32

advapi32

shlwapi

mfc71u

msvcr71

msvcp71

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 324B

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 324B

.rsrc
Size: 6KB - Virtual size: 5KB