bc2bd2073fa800923ba71dc5c57417523f308a680ad5a32375eabd04cb2646a6

Sharing

Copy URL Twitter E-mail

General

Target

bc2bd2073fa800923ba71dc5c57417523f308a680ad5a32375eabd04cb2646a6
Size

80KB
MD5

a2cf5c83723e5a91fb46c454fcfa7c40
SHA1

58e7d039782f74a12370471dc5dbe95ecfc01e67
SHA256

bc2bd2073fa800923ba71dc5c57417523f308a680ad5a32375eabd04cb2646a6
SHA512

04e226a72439e5e48fce6a3b220ffdf4b8758664d1bff86652e48af8a2a8a74ac0c35f728fe27c8ee319b0cf266a375348c32bf6863ac54c35a4d4df5e4a2848
SSDEEP

1536:hzFPIyBEwjS8qSgTtCacSB3kNVLN5T7oHQ8yyFNffYz/:zPIyBEwu8qFcSBUxQQ8yqNno

Score

N/A

Malware Config

Signatures

Files

bc2bd2073fa800923ba71dc5c57417523f308a680ad5a32375eabd04cb2646a6
.exe windows x86

89d09c317251bf736097cea4ec4bbd23

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueW

kernel32

CreateProcessW
SetFilePointer
CreateFileW
GetLastError
HeapSetInformation
GetFileAttributesW
SetFileAttributesW
DeleteFileW
FindNextFileW
FindClose
CloseHandle
FlushFileBuffers
CreateFileA
VirtualQuery
GetSystemInfo
VirtualProtect
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
WriteFile
RemoveDirectoryW
GetCommandLineA
GetVersionExA
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
HeapDestroy
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
OutputDebugStringA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
GetModuleHandleW
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
Sleep
VirtualAlloc
HeapReAlloc
RtlUnwind
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FindFirstFileW

user32

LoadStringW

shell32

SHGetSpecialFolderLocation
SHFileOperationW
SHGetPathFromIDListW

shlwapi

SHDeleteKeyW
PathAddBackslashW
PathRemoveArgsW
PathUnquoteSpacesW
PathRemoveFileSpecW
PathRemoveBackslashW
PathCombineW

msi

ord141
ord16

ole32

CoInitialize
CoUninitialize
CoCreateInstance

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

89d09c317251bf736097cea4ec4bbd23

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

shell32

shlwapi

msi

ole32

Sections

.text Size: 51KB - Virtual size: 51KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 22KB - Virtual size: 28KB

.text
Size: 51KB - Virtual size: 51KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 22KB - Virtual size: 28KB