bf47d0aaae797a84843f54ec536b4fe978cb3b45bc446e737a106ad9bd1e0080

Sharing

Copy URL

Twitter E-mail

General

Target

bf47d0aaae797a84843f54ec536b4fe978cb3b45bc446e737a106ad9bd1e0080
Size

253KB
MD5

a180057306c90f59f86f30d448ce764e
SHA1

021f9fcd973bf677a831d394c1c453104f65b1bc
SHA256

bf47d0aaae797a84843f54ec536b4fe978cb3b45bc446e737a106ad9bd1e0080
SHA512

1e00495530109c383d1519f638175fdb8f1d25591a91f785bc07fce3afbcc78b2d044cd7ac87c5f02a96ef301d896270db165b0cff78d6caf5829066aafcfa0d
SSDEEP

6144:CcARtxbxOS/nQQRSUgH+8joDPEckn3xijlz2:O7lOAXsAcoDP3k+lK

Score

N/A

Malware Config

Signatures

Files

bf47d0aaae797a84843f54ec536b4fe978cb3b45bc446e737a106ad9bd1e0080
.exe windows x86

910f42f4aedcf65c38e2f40f6dec15b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
FreeLibrary
CloseHandle
Sleep
DeleteCriticalSection
VirtualAlloc
GetLastError
ResetEvent
GetTickCount
CancelIo
GetLocalTime
GetCurrentProcessId
DeleteFileA
CreateDirectoryA
GetFileAttributesA
lstrcpyA
lstrlenA
GetDiskFreeSpaceExA
GetVolumeInformationA
GetLogicalDriveStringsA
FindClose
LocalFree
LocalReAlloc
LocalAlloc
GetFileSize
ReadFile
SetFilePointer
MoveFileA
lstrcatA
CreateProcessA
InitializeCriticalSection
MapViewOfFile
CreateFileMappingA
HeapFree
UnmapViewOfFile
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GetStartupInfoA
WaitForMultipleObjects
TerminateProcess
OpenProcess
GetCurrentThreadId
GetSystemInfo
GetComputerNameA
GetVersionExA
Process32First
CreateToolhelp32Snapshot
GetCurrentProcess
HeapAlloc
GetProcessHeap
InterlockedDecrement
OpenEventA
SetErrorMode
MultiByteToWideChar
CompareStringW
CompareStringA
GetUserDefaultLCID
EnumSystemLocalesA
lstrlenW
InterlockedExchange
GetLocaleInfoW
GetLocaleInfoA
IsValidCodePage
IsValidLocale
LCMapStringW
RtlUnwind
RaiseException
CreateThread
TlsSetValue
TlsGetValue
ExitThread
GetTimeZoneInformation
GetSystemTime
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
TlsFree
SetLastError
GetCurrentThread
FatalAppExitA
SetUnhandledExceptionFilter
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
IsBadWritePtr
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
IsBadReadPtr
IsBadCodePtr
InterlockedIncrement
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetStdHandle
SetConsoleCtrlHandler
LCMapStringA
SetEnvironmentVariableA

ole32

OleRun
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

VariantClear
SysFreeString
SysAllocString
GetErrorInfo
SetErrorInfo
VariantChangeType
CreateErrorInfo
VariantInit

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

910f42f4aedcf65c38e2f40f6dec15b8

Headers

File Characteristics

Imports

kernel32

ole32

oleaut32

Sections

.text Size: 168KB - Virtual size: 168KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 27KB - Virtual size: 35KB

.rsrc Size: 39KB - Virtual size: 39KB

.text
Size: 168KB - Virtual size: 168KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 27KB - Virtual size: 35KB

.rsrc
Size: 39KB - Virtual size: 39KB