5783ca9d2f0ddba2bbb5e6b883293474023910590b79c26d3c3b1252b8675cbc

Sharing

Copy URL Twitter E-mail

General

Target

5783ca9d2f0ddba2bbb5e6b883293474023910590b79c26d3c3b1252b8675cbc
Size

104KB
MD5

82b80074a318bd572ae10b121df4f700
SHA1

5a6ae256ea19701449223aa86565c73e3c0ff8fe
SHA256

5783ca9d2f0ddba2bbb5e6b883293474023910590b79c26d3c3b1252b8675cbc
SHA512

f969f7ed24a6a693c38fe86fbbaa84014ebc62697982b2c3b901100de146ddf6ae8e7dfb44204d403f6260ab88279cad1edd9941b52954626aae57a636e3dd66
SSDEEP

3072:c2ROO2DvriZ47a3OnWdQmaQ34qfIK3BQTjn7q7:tROXDuCe3OnWmmaQ34cIWKTq

Score

N/A

Malware Config

Signatures

Files

5783ca9d2f0ddba2bbb5e6b883293474023910590b79c26d3c3b1252b8675cbc
.exe windows x86

3804a7c7d7364c0b66c9740b5ac1ec02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
SetEvent
GetCurrentProcess
GetCurrentThreadId
GetModuleHandleW
CreateEventW
CreateThread
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
Sleep
WaitForSingleObject
CloseHandle
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
lstrlenW
DeleteCriticalSection
UnhandledExceptionFilter
InitializeCriticalSection

user32

CharUpperW
TranslateMessage
DispatchMessageW
GetMessageW
UnregisterClassA
CharNextW
PostThreadMessageW

advapi32

RegDeleteValueW
RegOpenKeyExW
RegCloseKey

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysStringLen
LoadRegTypeLi
LoadTypeLi
SysFreeString

atl80

ord31
ord30
ord32
ord17
ord61
ord23
ord64
ord20
ord18
ord58
ord22

msvcr80

_controlfp_s
??3@YAXPAX@Z
??_V@YAXPAX@Z
free
??_U@YAPAXI@Z
__CxxFrameHandler3
??2@YAPAXI@Z
memset
_except_handler4_common
?terminate@@YAXXZ
_unlock
_encode_pointer
__dllonexit
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson

rpcrt4

IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrCStdStubBuffer_Release
NdrCStdStubBuffer2_Release
IUnknown_Release_Proxy
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
NdrOleAllocate
NdrOleFree
NdrStubForwardingFunction
CStdStubBuffer_DebugServerRelease

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.orpc
Size: 1024B - Virtual size: 539B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3804a7c7d7364c0b66c9740b5ac1ec02

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

atl80

msvcr80

rpcrt4

Sections

.text Size: 12KB - Virtual size: 11KB

.orpc Size: 1024B - Virtual size: 539B

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 73KB - Virtual size: 76KB

.text
Size: 12KB - Virtual size: 11KB

.orpc
Size: 1024B - Virtual size: 539B

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 73KB - Virtual size: 76KB