00b48314909fba766530b8a6873d2ef09112370ef81ea71552180509dd4e6f2b

Sharing

Copy URL Twitter E-mail

General

Target

00b48314909fba766530b8a6873d2ef09112370ef81ea71552180509dd4e6f2b
Size

159KB
MD5

113c686e9403416eae430144a0f39b70
SHA1

81c222676eac1bbd80418b6f3b10568aff587171
SHA256

00b48314909fba766530b8a6873d2ef09112370ef81ea71552180509dd4e6f2b
SHA512

e3e5e730009f472bf1287a74ee81faa1fedbc164306bb85f183ddfe3779d9c15d19baba36e46bd005351ab275d8adbc9dbb5de583c2e7424d8fabb3074877fb6
SSDEEP

3072:jC82i8PpsbU0vrreHZAzIWswpHh7tiulKIUhIzmeKiX+sz0QmvzSv5I1FL:jCFi6sbtzXd2VhrsVNmvmB6FL

Score

N/A

Malware Config

Signatures

Files

00b48314909fba766530b8a6873d2ef09112370ef81ea71552180509dd4e6f2b
.exe windows x86

f3fad95e43c8f6135132a6405c88bc02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

GetFileAttributesW
GetFullPathNameW
Sleep
FindResourceW
CreateProcessW
CreateDirectoryW
SizeofResource
CreateFileW
LockResource
WriteFile
MoveFileExW
GetFileSize
SetFilePointer
FindResourceExW
SetEndOfFile
CloseHandle
GetLastError
CopyFileW
DeleteFileW
GetTickCount
CreateFileA
WriteConsoleW
MoveFileW
CompareStringA
CompareStringW
SetEnvironmentVariableA
LoadResource
SetUnhandledExceptionFilter
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
ExitProcess
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WideCharToMultiByte
GetTimeZoneInformation
GetStdHandle
GetModuleFileNameA
LoadLibraryA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
VirtualAlloc
RtlUnwind
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers

user32

GetDesktopWindow
UnregisterClassA

advapi32

RegCreateKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW

shell32

SHCreateDirectoryExW
SHFileOperationW
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderLocation

shlwapi

PathFileExistsW

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f3fad95e43c8f6135132a6405c88bc02

Headers

File Characteristics

Imports

version

kernel32

user32

advapi32

shell32

shlwapi

Sections

.text Size: 63KB - Virtual size: 62KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 69KB - Virtual size: 72KB

.text
Size: 63KB - Virtual size: 62KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 69KB - Virtual size: 72KB