83edc7b12d4574d6b76f84b0558417ab7e5328399b3a8f38b6cbee11ce7a21c7

Sharing

Copy URL Twitter E-mail

General

Target

83edc7b12d4574d6b76f84b0558417ab7e5328399b3a8f38b6cbee11ce7a21c7
Size

130KB
MD5

928bef35d8d5cf9c3f6679be4dc9c170
SHA1

09f0ce1089050fdb114670c0a3a841ca63041708
SHA256

83edc7b12d4574d6b76f84b0558417ab7e5328399b3a8f38b6cbee11ce7a21c7
SHA512

51f18696ebcea4d32a07ca45935bd43b729511cb67d852627e1a0ada95969ce07392ff9f6302e3ba0589c2970c8bfe6ebbc9e0d35440079bfe97c1710d260250
SSDEEP

1536:+n+tenYu1PmRv6CJViCZ52xpPUZjZa7rh+e9j8Jtu0OA5NDilh53aQ5:Or1PmBViCZAcvdnOA5Sh53ai

Score

N/A

Malware Config

Signatures

Files

83edc7b12d4574d6b76f84b0558417ab7e5328399b3a8f38b6cbee11ce7a21c7
.exe windows x86

30e2cc1031c06292c319523e8532ddc2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
WideCharToMultiByte
HeapFree
HeapAlloc
GetLogicalDrives
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
TerminateProcess
WaitForSingleObject
GetDriveTypeA
LockFile
DeleteFileA
GetFileSizeEx
CreateFileA
OpenProcess
CopyFileA
SetFileAttributesA
GetCurrentDirectoryA
GetWindowsDirectoryA
GetTickCount
GetProcessHeap
SetEndOfFile
CreateFileW
GetLocaleInfoW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
CloseHandle
FreeLibrary
LoadLibraryA
Sleep
GetProcAddress
WriteConsoleA
InitializeCriticalSectionAndSpinCount
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetLastError
RtlUnwind
GetCommandLineA
GetStartupInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetCPInfo
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetStdHandle
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
HeapSize
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale

user32

MessageBoxA
FindWindowA
EnumChildWindows
GetWindowTextA
GetClassNameA
SendMessageA
GetWindowThreadProcessId
PostMessageA
EnumWindows

advapi32

RegSetValueExA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA

shell32

ShellExecuteA

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qnk
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

30e2cc1031c06292c319523e8532ddc2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 93KB - Virtual size: 93KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 10KB - Virtual size: 10KB

.qnk Size: - Virtual size: 1B

.text
Size: 93KB - Virtual size: 93KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 10KB - Virtual size: 10KB

.qnk
Size: - Virtual size: 1B