125b23f7c140296c8c098f96bbcf1efca8bc2c93a23668be9b553cd4e1ea8fce

Sharing

Copy URL Twitter E-mail

General

Target

125b23f7c140296c8c098f96bbcf1efca8bc2c93a23668be9b553cd4e1ea8fce
Size

148KB
MD5

0f023f8513ea01c31dd1acbe465dd020
SHA1

1ee9c98c1177e07c3062c622be2fc2b1779c9696
SHA256

125b23f7c140296c8c098f96bbcf1efca8bc2c93a23668be9b553cd4e1ea8fce
SHA512

178b1f51fda8c96b680dd7334d9ae539968c5d7052228fa06a21a4f7bd1885a3b1a24f8799a984426a6fb82314f99a37d5bec2e800467ae1d196441f1c273caf
SSDEEP

1536:0H5y5E//pQSdZDXe1p1n0rzPmOL+kilgJ0KR2ri8Lido3uiWVK6fqHR6:k5z571Xjn/JiGJQLi3iwK6fuR

Score

N/A

Malware Config

Signatures

Files

125b23f7c140296c8c098f96bbcf1efca8bc2c93a23668be9b553cd4e1ea8fce
.exe windows x86

7550027fa8893b350bd3579e779edbd7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msi

ord149

gdi32

CreateDCA
SetRectRgn
DeleteEnhMetaFile
RestoreDC
GetCurrentPositionEx
GetTextMetricsA
CreatePalette
CreateFontW
CreateFontIndirectW
SetROP2
LPtoDP
GetDeviceCaps
GetDIBits
StretchDIBits
GetMapMode
GetBitmapBits
GetWindowOrgEx
SetStretchBltMode
ExtCreatePen
SetTextAlign
CreateDIBSection
SelectPalette
SetViewportExtEx

shlwapi

PathGetCharTypeA

kernel32

GetConsoleMode
CompareStringW
CompareStringA
GetTimeZoneInformation
GetModuleHandleW
lstrcmpA
VirtualAlloc
GetTickCount
FormatMessageW
TerminateProcess
lstrlenW
WideCharToMultiByte
ReadFile
GetModuleFileNameW
LoadLibraryA
SetHandleCount
CreateFileW
InterlockedIncrement
HeapFree
GetStringTypeW
GetLastError
HeapAlloc
SetEvent
GetCurrentProcess
SetFilePointer
InterlockedExchange
GetModuleFileNameA
InterlockedCompareExchange
GetFileType
GetCommandLineW
FreeLibrary
TlsGetValue
GetEnvironmentStringsW
CreateFileA
QueryPerformanceCounter
GetVersionExA
IsDebuggerPresent
DeleteCriticalSection
WaitForSingleObjectEx
FreeEnvironmentStringsW
SetEnvironmentVariableA
Sleep
GetOEMCP
FreeLibraryAndExitThread
LCMapStringW
TlsSetValue
EnterCriticalSection
GetACP
WaitForSingleObject
LeaveCriticalSection
LocalFree
TryEnterCriticalSection
WriteFile
InterlockedDecrement
GetModuleHandleA
GetFileSize
RaiseException
CloseHandle
MultiByteToWideChar
FlushFileBuffers
HeapDestroy
CreateThread
ExitProcess
GetStdHandle
GetProcessHeap
CreateEventW
GetCurrentProcessId
GetCommandLineA
GetStartupInfoA
GetProcAddress
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
TlsAlloc
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
HeapCreate
VirtualFree
GetSystemTimeAsFileTime
FatalAppExitA
SetUnhandledExceptionFilter
SetConsoleCtrlHandler
InitializeCriticalSection
GetCPInfo
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
GetLocaleInfoW
LCMapStringA
GetStringTypeA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage

Sections

.text
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7550027fa8893b350bd3579e779edbd7

Headers

File Characteristics

Imports

msi

gdi32

shlwapi

kernel32

Sections

.text Size: 112KB - Virtual size: 110KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 12KB - Virtual size: 39KB

.sxdata Size: 4KB - Virtual size: 116B

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 112KB - Virtual size: 110KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 12KB - Virtual size: 39KB

.sxdata
Size: 4KB - Virtual size: 116B

.rsrc
Size: 4KB - Virtual size: 3KB