d4eaff326fe48f374cfefb0de3572c2df81000e0a6c21e1dd5c56919e2a67af0

Sharing

Copy URL Twitter E-mail

General

Target

d4eaff326fe48f374cfefb0de3572c2df81000e0a6c21e1dd5c56919e2a67af0
Size

84KB
MD5

07b1a6fd78e72487981b435cd8ced4f0
SHA1

93bb77530b90d729f269fb94135270373b0602a1
SHA256

d4eaff326fe48f374cfefb0de3572c2df81000e0a6c21e1dd5c56919e2a67af0
SHA512

11fb456d4a5890082e1239e4726aa131c0fa8df37c4c05f46a30d0b7aa4aadb455e3b4a5e4a49bb286b5e2cf69357c3b5503fdac0184a46d388aec5420b50bd4
SSDEEP

768:DAt8DlVQu+I+UWHtCNq+A1WuptrknoFuhTt6IOLi7JKFHjP+Gh8d4Wp2Nz5EfTx:4CRrNDkW4t1ATt6IOLieHq88d4WpTfF

Score

N/A

Malware Config

Signatures

Files

d4eaff326fe48f374cfefb0de3572c2df81000e0a6c21e1dd5c56919e2a67af0
.exe windows x86

ff2d7e3a12727cff094e590ba660afb6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
GetLocalTime
TerminateProcess
WritePrivateProfileStringA
GetPrivateProfileStringA
CopyFileA
DeleteFileA
GetTempPathA
GetCurrentThreadId
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
WriteFile
lstrcatA
GetSystemDirectoryA
Sleep
CreateMutexA
GetStringTypeA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
CreateProcessA
CreateToolhelp32Snapshot
Process32First
Process32Next
OpenProcess
GetLastError
CreateFileA
CreateFileMappingA
CloseHandle
MapViewOfFile
UnmapViewOfFile
GetModuleHandleA
ReleaseMutex
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapFree
ExitProcess
GetVersion
MoveFileA
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetStringTypeW

user32

GetDesktopWindow
GetWindowTextA
CloseDesktop
SetThreadDesktop
GetThreadDesktop
MessageBoxA
wsprintfA
GetWindow
CreateDesktopA
GetInputState
PostThreadMessageA
GetMessageA

advapi32

RegQueryValueExA
RegOpenKeyA
RegCloseKey
CreateProcessAsUserA
OpenProcessToken
RegDeleteKeyA
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext

shell32

SHGetSpecialFolderPathA
ShellExecuteA

urlmon

URLDownloadToCacheFileA

wininet

DeleteUrlCacheEntryA
FindCloseUrlCache
DeleteUrlCacheEntry
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA

shlwapi

SHSetValueA
PathFileExistsA
SHGetValueA

winmm

waveOutSetVolume

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff2d7e3a12727cff094e590ba660afb6

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

urlmon

wininet

shlwapi

winmm

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 44KB - Virtual size: 42KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 44KB - Virtual size: 42KB

.rsrc
Size: 4KB - Virtual size: 2KB