dc4266300e9cbefae94accddcaed9f0723da7bac928cad7a05ba3b427fc5a71c

Sharing

Copy URL Twitter E-mail

General

Target

dc4266300e9cbefae94accddcaed9f0723da7bac928cad7a05ba3b427fc5a71c
Size

504KB
MD5

92824c938599416bee9720126b9272a9
SHA1

b8bc005eeb7a245f5cd55e67bc8a0a91d93da4b2
SHA256

dc4266300e9cbefae94accddcaed9f0723da7bac928cad7a05ba3b427fc5a71c
SHA512

cff1b007f8d3595596fb82114cc6d3403d1ae7a71b9d96314a59d689b6fb207311d88b52dfb41afd26b55756b889fcc961c23810bf8f3b62e1286843857f6b5a
SSDEEP

12288:BFv1wOZH7w1C2WBZkegXb7IZTMTlpMURIDi/Tq660:ftwEH7H2WBXQMURIYb

Score

N/A

Malware Config

Signatures

Files

dc4266300e9cbefae94accddcaed9f0723da7bac928cad7a05ba3b427fc5a71c
.exe windows x86

4bc537de466abe12eb6ed7f9bf4ecbd3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointerEx
WriteFile
FindClose
FindFirstFileW
FreeLibrary
GetProcAddress
LoadLibraryW
InterlockedDecrement
InterlockedIncrement
GetCurrentProcess
GetVolumeInformationW
CreateThread
GetFileAttributesW
GetFullPathNameW
SetVolumeMountPointW
GetVolumeNameForVolumeMountPointW
DefineDosDeviceW
GetLogicalDrives
Sleep
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
SetFileTime
GetFileSize
GetFileTime
SetFileAttributesW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
DeleteFileW
ReadFile
CopyFileW
LoadResource
LockResource
FindResourceW
SetStdHandle
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
FlushFileBuffers
GetEnvironmentStrings
FreeEnvironmentStringsW
GetTickCount
GetVersionExW
CreateFileW
GetLastError
DeviceIoControl
CloseHandle
GetLogicalDriveStringsW
GetDriveTypeW
FormatMessageW
LocalFree
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
GetTempPathW
OutputDebugStringW
RtlUnwind
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy

user32

PostMessageW
EndDialog
MoveWindow
GetWindowTextW
SetWindowTextW
EnableWindow
GetWindowRect
SystemParametersInfoW
SetFocus
GetSystemMenu
AppendMenuW
GetDlgItem
SendMessageW
LoadStringW
MessageBoxW
FindWindowW
SetForegroundWindow
DialogBoxParamW

advapi32

EqualSid
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
RegCloseKey
FreeSid
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc

ole32

CoInitializeEx
CoUninitialize

comctl32

InitCommonControlsEx

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SharedD
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 420KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4bc537de466abe12eb6ed7f9bf4ecbd3

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

comctl32

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 20KB - Virtual size: 28KB

.SharedD Size: 4KB - Virtual size: 4B

.rsrc Size: 420KB - Virtual size: 420KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 20KB - Virtual size: 28KB

.SharedD
Size: 4KB - Virtual size: 4B

.rsrc
Size: 420KB - Virtual size: 420KB