16651a74da4a28bdcd930ec57494f936976568a100dcbb7ec50fd176deb7a9d3

Sharing

Copy URL Twitter E-mail

General

Target

16651a74da4a28bdcd930ec57494f936976568a100dcbb7ec50fd176deb7a9d3
Size

265KB
MD5

138a863cd6d201ecac3c5fbe796e7752
SHA1

e7d788ff9cc0c054b89d2d9be15a9cf472b2fa74
SHA256

16651a74da4a28bdcd930ec57494f936976568a100dcbb7ec50fd176deb7a9d3
SHA512

64a2d1dfc3dd0b66536cce59582cc18badf05261d0e252248aff38e02a1e2a55c8f6afdcac1434865450a4434dcb2061c92758065dd292e5b7d8b198faef67dd
SSDEEP

3072:pMssVOap9TgPsvz0H18kHTJ62WN5mBIVAq659I:ppyOU9TqVBJ620wIVd

Score

N/A

Malware Config

Signatures

Files

16651a74da4a28bdcd930ec57494f936976568a100dcbb7ec50fd176deb7a9d3
.exe windows x86

784faa0787021767cd7614a0336cee24

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileAttributesW
GetFileSize
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessVersion
GetShortPathNameW
GetStartupInfoA
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetTickCount
LoadLibraryW
LocalAlloc
LocalFree
FindNextFileA
OpenEventW
OpenFileMappingW
OpenMutexW
OpenProcess
ProcessIdToSessionId
QueryPerformanceCounter
SetCurrentDirectoryW
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
WriteFile
lstrcatW
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrcpyW
lstrlenA
lstrlenW
FindFirstFileA
FindClose
CreateProcessW
CreateFileMappingW
CreateFileA
CreateEventW
CloseHandle
VirtualAllocEx
MapViewOfFile
CreateFileW

user32

SetFocus
MessageBoxA
IsDlgButtonChecked
IsDialogMessageA
TranslateMessage
EndDialog
DialogBoxParamA
CreateDialogParamA
CheckDlgButton
LoadIconW
ShowWindow
GetDesktopWindow
SetForegroundWindow

advapi32

RegOpenKeyW
RegEnumKeyExA
RegOpenKeyA
RegOpenKeyExA
RegOverridePredefKey
RegQueryInfoKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey

ole32

CoUninitialize
CoGetMalloc
CoCreateInstance
CoTaskMemRealloc
CoInitialize

shlwapi

wnsprintfA
StrFormatByteSize64A

Sections

.text14
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text13
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text12
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text11
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 238KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text16
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text15
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

784faa0787021767cd7614a0336cee24

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

shlwapi

Sections

.text14 Size: 1024B - Virtual size: 1000B

.text13 Size: 1024B - Virtual size: 1000B

.text12 Size: 1024B - Virtual size: 1000B

.text11 Size: 1024B - Virtual size: 1000B

.text Size: 238KB - Virtual size: 237KB

.text16 Size: 1024B - Virtual size: 1000B

.text15 Size: 1024B - Virtual size: 1000B

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 416B

.rsrc Size: 15KB - Virtual size: 15KB

.reloc Size: 1KB - Virtual size: 1KB

.text14
Size: 1024B - Virtual size: 1000B

.text13
Size: 1024B - Virtual size: 1000B

.text12
Size: 1024B - Virtual size: 1000B

.text11
Size: 1024B - Virtual size: 1000B

.text
Size: 238KB - Virtual size: 237KB

.text16
Size: 1024B - Virtual size: 1000B

.text15
Size: 1024B - Virtual size: 1000B

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 416B

.rsrc
Size: 15KB - Virtual size: 15KB

.reloc
Size: 1KB - Virtual size: 1KB