1f74027f7792e95b1be337dc1a7d268a546c9b1feb2170347add8c3fb31c3783

Sharing

Copy URL

Twitter E-mail

General

Target

1f74027f7792e95b1be337dc1a7d268a546c9b1feb2170347add8c3fb31c3783
Size

713KB
MD5

81d0c19275bf776c9a9c50fc8dd0db35
SHA1

93495d5ffa9960bd1ff3298e3e454b6e96015ecc
SHA256

1f74027f7792e95b1be337dc1a7d268a546c9b1feb2170347add8c3fb31c3783
SHA512

0ff3a7b3e0fd92d37031fc16ee6834845aac9a581f631b2a7a0836581c9db96c05b95074cd09b19d8d89f04d920cbddbff4ae66b091e2c820d73e061dc159000
SSDEEP

12288:RNfKLBRkfgWYGPKhyhcJrqFSWdNoKfeZ8EJa+Ez2WBtzM307xFD+4T/PcNXEsVuN:RtKLBRkYWzihjJGV7ffeZ8Ec91BtIx+/

Score

N/A

Malware Config

Signatures

Files

1f74027f7792e95b1be337dc1a7d268a546c9b1feb2170347add8c3fb31c3783
.exe windows x86

dceb05b33554118562287d096f95b8b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA

kernel32

CopyFileA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindResourceA
GetCommandLineA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
LoadResource
LockResource
SetUnhandledExceptionFilter
SizeofResource
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
atoi
calloc
fclose
fopen
fread
free
fseek
ftell
fwrite
getenv
malloc
puts
rewind
signal
strcat
strtok
vfprintf

shell32

SHGetFolderPathA
ShellExecuteA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dceb05b33554118562287d096f95b8b3

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

shell32

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 100B

.rdata Size: 512B - Virtual size: 336B

.bss Size: - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 100B

.rdata
Size: 512B - Virtual size: 336B

.bss
Size: - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 2KB - Virtual size: 2KB