d84f850b34155f748c8b41645c8456b8fd0eef4b62594b3d18f8309ac2eff0cb

Sharing

Copy URL Twitter E-mail

General

Target

d84f850b34155f748c8b41645c8456b8fd0eef4b62594b3d18f8309ac2eff0cb
Size

88KB
MD5

92aa7d420956a4ed8a102413c8a0a659
SHA1

d7d78efead5ca72dfdea5f33711f0635df88991d
SHA256

d84f850b34155f748c8b41645c8456b8fd0eef4b62594b3d18f8309ac2eff0cb
SHA512

cdaec63d56268777a8f676ac15c5ccffe55e43b244901ac373381655d3510c5147d7551ae61ab32d387037be27597db256e6ec5eb6e7a65e8317526a86e2dcb5
SSDEEP

1536:4lqtSo21Ac6oyK4r+8vn4bnWCG05j8usumAJBadQgYWdgOeT0+O883Yq2IhBdkEr:rgjmK4r+8/qrQ1u7tWdgOPnrgnuV

Score

N/A

Malware Config

Signatures

Files

d84f850b34155f748c8b41645c8456b8fd0eef4b62594b3d18f8309ac2eff0cb
.exe windows x86

60397dfc8c4f0f59e9a8798ef1720fbf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shfolder

SHGetFolderPathW

kernel32

RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiW
GetModuleFileNameW
Sleep
CreateThread
CreateEventW
GetModuleHandleW
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
SetEvent
FreeLibrary
SizeofResource
WaitForSingleObject
FindResourceW
LoadLibraryExW
GetCommandLineW
DeleteFileW
CopyFileW
IsValidLocale
GetUserDefaultLCID
ExpandEnvironmentStringsW
SetFilePointer
CreateDirectoryW
CompareStringW
GetLocaleInfoA
GetThreadLocale
LocalFree
InterlockedExchange
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
lstrlenW
WriteFile
MultiByteToWideChar
CreateFileW
GetFileTime
CloseHandle
CompareFileTime
ReadFile
GetACP
LoadResource
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
GetVersionExA

user32

CharUpperW
TranslateMessage
UnregisterClassA
GetMessageW
PostThreadMessageW
CharNextW
DispatchMessageW

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegEnumValueW

ole32

StringFromGUID2
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoRevokeClassObject
CoRegisterClassObject
CoCreateInstance
CoInitialize

oleaut32

VarBstrCat
SafeArrayDestroy
SafeArrayGetElement
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SafeArrayCreate
SafeArrayPutElement
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
VariantInit
SysFreeString
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi

shlwapi

PathFileExistsW
PathIsURLW

msvcr80

__set_app_type
__p__fmode
__p__commode
_crt_debugger_hook
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
?terminate@@YAXXZ
_except_handler4_common
_decode_pointer
_onexit
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
??3@YAXPAX@Z
wcsrchr
free
_CxxThrowException
??2@YAPAXI@Z
__CxxFrameHandler3
_wcsicoll
_wcsicmp
memset
wcslen
memcmp
malloc
memcpy_s
wcscpy_s
wcsncpy_s
wcscat_s
??_V@YAXPAX@Z
??_U@YAPAXI@Z
_purecall
_recalloc
memmove_s
calloc
wcscmp
wcschr
_vsnwprintf_s
wcsstr
_wtoi
_unlock
_encode_pointer
__dllonexit
_lock

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

60397dfc8c4f0f59e9a8798ef1720fbf

Headers

DLL Characteristics

File Characteristics

Imports

shfolder

kernel32

user32

advapi32

ole32

oleaut32

shlwapi

msvcr80

Sections

.text Size: 52KB - Virtual size: 50KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 12KB - Virtual size: 10KB

.text
Size: 52KB - Virtual size: 50KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 12KB - Virtual size: 10KB