3a2d75098e2480d34070e2f00a4446716e60aefd56fb7334fef93f4f062e29f6

Sharing

Copy URL Twitter E-mail

General

Target

3a2d75098e2480d34070e2f00a4446716e60aefd56fb7334fef93f4f062e29f6
Size

286KB
MD5

0c1586db1c04e7134dd968afa553e1c7
SHA1

2aa2d349ddb19ba48691b23b5153ee42d580e03a
SHA256

3a2d75098e2480d34070e2f00a4446716e60aefd56fb7334fef93f4f062e29f6
SHA512

b0e9afab5e61c2f198a6cb12548b8bced25e5592b1423a91eff2b3fdf08156f547f9c8c8ad1cf5e16bb9a3bf5ec69dac4d3977e052ec55bf3b34f4ddfb4bc922
SSDEEP

6144:F2kwdQjdM/kWVRHhQ4aVOPGqqzEztSyAZFlXOY3MW+nK:VwdQjdMZZaVOuqoEgyuB3MW+K

Score

N/A

Malware Config

Signatures

Files

3a2d75098e2480d34070e2f00a4446716e60aefd56fb7334fef93f4f062e29f6
.exe windows x86

cadd0b2dd7808b24fc4196a98460cd4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Add
InitCommonControlsEx
MakeDragList

kernel32

GetTimeZoneInformation
ExitProcess
VirtualAlloc
TlsSetValue
SetCurrentDirectoryW
IsBadWritePtr
GetEnvironmentStringsW
SetHandleCount
RtlUnwind
LCMapStringA
SetLastError
IsValidLocale
VirtualQuery
FreeEnvironmentStringsA
GetACP
TerminateProcess
InterlockedDecrement
GetLogicalDrives
VirtualFree
GetTickCount
SetEnvironmentVariableA
WriteFile
HeapCreate
HeapAlloc
GetLastError
InitializeCriticalSection
GetEnvironmentStrings
GetStdHandle
InterlockedExchange
GetVersion
ReadFile
LeaveCriticalSection
GetCPInfo
WideCharToMultiByte
GetProcAddress
FlushFileBuffers
GlobalGetAtomNameW
CreateMutexA
GetCurrentProcess
CloseHandle
FreeEnvironmentStringsW
CompareStringA
OpenMutexA
DeleteCriticalSection
TlsFree
SetFilePointer
GetModuleHandleA
GetSystemTimeAsFileTime
GetSystemTime
GetLocalTime
GetCurrentThread
GetStringTypeA
LCMapStringW
GetFileType
GetTempFileNameA
GetModuleFileNameA
InterlockedIncrement
GetCurrentThreadId
FormatMessageW
LoadLibraryA
TlsGetValue
GetStringTypeW
GetCurrentProcessId
UnhandledExceptionFilter
GetOEMCP
EnterCriticalSection
GetStartupInfoA
HeapDestroy
GetCommandLineA
TlsAlloc
CompareStringW
SetStdHandle
HeapReAlloc
QueryPerformanceCounter
HeapFree
GetLogicalDriveStringsA
MultiByteToWideChar

shell32

ShellAboutA

user32

MapVirtualKeyExA
RegisterClassExA
GetClassNameA
CreateWindowExA
CharUpperW
DestroyIcon
DestroyWindow
CloseWindow
RegisterClassA
GetMenuItemInfoW
GetWindowContextHelpId
InvalidateRgn
MessageBoxW
DefWindowProcA
GetCursorPos
WaitMessage
GetFocus
ShowWindow
GetUpdateRect
ImpersonateDdeClientWindow
SystemParametersInfoW
CharLowerW
SetWindowTextA
IsCharAlphaNumericA
CreateIconIndirect
DdeInitializeA

Sections

.text
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cadd0b2dd7808b24fc4196a98460cd4f

Headers

File Characteristics

Imports

comctl32

kernel32

shell32

user32

Sections

.text Size: 126KB - Virtual size: 125KB

.rdata Size: 57KB - Virtual size: 66KB

.data Size: 86KB - Virtual size: 85KB

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: 126KB - Virtual size: 125KB

.rdata
Size: 57KB - Virtual size: 66KB

.data
Size: 86KB - Virtual size: 85KB

.rsrc
Size: 16KB - Virtual size: 16KB