ffad5427bc844d7597606547b3445c19f558722b34e87846188cdd24303c834b

Sharing

Copy URL Twitter E-mail

General

Target

ffad5427bc844d7597606547b3445c19f558722b34e87846188cdd24303c834b
Size

175KB
MD5

3fc18348cf1717346f32b66e1d2f5c90
SHA1

2b58c8b16544e49ca8533cdbc8f647ec8f528e91
SHA256

ffad5427bc844d7597606547b3445c19f558722b34e87846188cdd24303c834b
SHA512

ceb29e45a973292b2b9948f8b0907640847fdede5d18ca6343476f94b9733d79ffe3c524d79a0d255bc1fa556f23497c8bf9fe16d3fe8a9b72ff4be74948ebcb
SSDEEP

3072:fMc7HDQh2NXy2AbA8WZP2XsCGt3OY/t8kcfhvuxr0pg4HHKWqo:fBbch2pyPx8ft3L8BpuxEXHHKE

Score

N/A

Malware Config

Signatures

Files

ffad5427bc844d7597606547b3445c19f558722b34e87846188cdd24303c834b
.exe windows x86

969296db6a5ce8758fcd24dc180d128f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapReAlloc
HeapSize
HeapFree
GetVersionExA
HeapDestroy
GetCommandLineW
HeapCreate
InterlockedIncrement
InterlockedDecrement
CloseHandle
GetFileTime
GetFileType
GetLastError
CreateFileW
ReadFile
WriteFile
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FormatMessageW
InterlockedCompareExchange
Sleep
InterlockedExchange
GetUserDefaultLCID
GetModuleFileNameA
LoadLibraryExA

msvcr80

wscanf
scanf
fclose
fflush
_wfopen
_ltow
__getmainargs
_cexit
_exit
_XcptFilter
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
wcstol
_wcsnicmp
towlower
wcsncmp
iswspace
_vsnprintf_s
wcschr
strrchr
memcpy
memset
_purecall
_vsnwprintf_s
setlocale
_ultow
exit
fwprintf
printf
__iob_func
fprintf
_amsg_exit

ole32

CoUninitialize
CoInitialize
CoTaskMemAlloc
CoCreateInstance

oleaut32

GetErrorInfo
VariantClear
VariantInit
SysAllocString
SysFreeString

shell32

CommandLineToArgvW

user32

LoadStringW

shlwapi

UrlIsW

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

969296db6a5ce8758fcd24dc180d128f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcr80

ole32

oleaut32

shell32

user32

shlwapi

Sections

.text Size: 80KB - Virtual size: 76KB

.data Size: 12KB - Virtual size: 8KB

.rsrc Size: 72KB - Virtual size: 72KB

.text
Size: 80KB - Virtual size: 76KB

.data
Size: 12KB - Virtual size: 8KB

.rsrc
Size: 72KB - Virtual size: 72KB