c910fa7d619747f1b7f404ffc1b38ba57b3211884f59cd4d5f70316b0cea0b29

General

Target

c910fa7d619747f1b7f404ffc1b38ba57b3211884f59cd4d5f70316b0cea0b29
Size

175KB
MD5

02c08f8abc0f5ae973e2199659b2a25d
SHA1

5f7cb7a3894ba1d4e0dabd1b73133ef9e970778e
SHA256

c910fa7d619747f1b7f404ffc1b38ba57b3211884f59cd4d5f70316b0cea0b29
SHA512

4880c0cb82097ffc7bfeb9a96443e53a794e4942d8f4ee747350ade006baf613574ab8839d1cd9b5d0f897fb9312ea33740fd8cfa769d2f0259182341d0759bd
SSDEEP

3072:sUMUp32uhRfx9X9QcsoaLtS4XTQ/vZn/nQ9wx0RR7zlW757Ip:rnDecstS4XqvZn/Q2x0RRXl67

Score

N/A

Malware Config

Signatures

Files

c910fa7d619747f1b7f404ffc1b38ba57b3211884f59cd4d5f70316b0cea0b29
.exe windows x86

664bba85582f303bf94343ef5e35a97c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetTickCount
lstrcpyA
FillConsoleOutputAttribute
LockResource
OutputDebugStringW
GetProcessWorkingSetSize
WideCharToMultiByte
FindClose
lstrcmpiW
CreateFileMappingW
GetLastError
lstrcpyW
InitializeCriticalSection
EnumResourceNamesW
FreeEnvironmentStringsW
MultiByteToWideChar
GetACP
lstrlenW
GlobalAlloc
GetCPInfo
GlobalFree
GetModuleHandleW

oleacc

LresultFromObject
CreateStdAccessibleObject

advapi32

RegCreateKeyExW
RegCloseKey
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegDeleteValueW
RegQueryInfoKeyW
RegSetValueExW

gdi32

DeleteObject
GetOutlineTextMetricsW
CreateFontIndirectW
GetTextMetricsW
SelectObject
AddFontResourceExW

user32

KillTimer
GetMessageW
CharUpperW
GetWindowLongA
PostThreadMessageW
GetDC
SetTimer
wsprintfW
DispatchMessageW
TranslateMessage
CharNextW
UnregisterClassA

ole32

StringFromGUID2
CoRevokeClassObject
CoRegisterClassObject
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoInitialize
StringFromCLSID

psapi

GetProcessMemoryInfo

shell32

SHGetFileInfoW

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

664bba85582f303bf94343ef5e35a97c

Headers

File Characteristics

Imports

kernel32

oleacc

advapi32

gdi32

user32

ole32

psapi

shell32

Sections

.text Size: 108KB - Virtual size: 108KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 63KB - Virtual size: 62KB

.isete Size: 1024B - Virtual size: 116KB

.text
Size: 108KB - Virtual size: 108KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 63KB - Virtual size: 62KB

.isete
Size: 1024B - Virtual size: 116KB