1b60b016ed1044a165fd8404a605d8828c7661c11ab29b4da19074ca20020d96

Sharing

Copy URL Twitter E-mail

General

Target

1b60b016ed1044a165fd8404a605d8828c7661c11ab29b4da19074ca20020d96
Size

108KB
MD5

2b5a622f14c2bcd22f9c5a9a4ecb7806
SHA1

908b9951d4de3ab9814239af07c60346e34f52da
SHA256

1b60b016ed1044a165fd8404a605d8828c7661c11ab29b4da19074ca20020d96
SHA512

4dfceba3366568b70f52fc9dbd1c27bf4af61e4db8d3cd79d5f172dd2fdf8a9ddf11a5ad7f58ad78c21191243f091e22a01f1f94728f62b569aee21af2abfac6
SSDEEP

1536:t8ucSj92XhCVCo0Xho/SgTlwhQTj/t/yrtrUKHbNLqgOfxtKQ:t83nCz0ZtQ//t/yWoLqgouQ

Score

N/A

Malware Config

Signatures

Files

1b60b016ed1044a165fd8404a605d8828c7661c11ab29b4da19074ca20020d96
.exe windows x86

de949e82a6dd2ffd84fff1f26ad61ad0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHDeleteKeyA
StrStrIA
PathAppendA

kernel32

FindFirstFileA
lstrcpyA
CloseHandle
CreateFileA
FreeLibrary
GetLastError
GetProcAddress
lstrcatA
GlobalFree
GlobalAlloc
GetCurrentProcess
SleepEx
GetLocaleInfoA
SetEndOfFile
ReadFile
HeapSize
CompareStringA
CompareStringW
LoadLibraryA
GetModuleHandleA
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetLocalTime
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
RtlUnwind
WideCharToMultiByte
SetEnvironmentVariableA
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
VirtualAlloc
HeapReAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
Sleep
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSection
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
SetFilePointer
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

wsprintfA

advapi32

OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA

shell32

SHGetFolderPathA
ShellExecuteA

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.trdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

de949e82a6dd2ffd84fff1f26ad61ad0

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

advapi32

shell32

Sections

.text Size: 52KB - Virtual size: 48KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 176B

.trdata Size: 28KB - Virtual size: 28KB

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 176B

.trdata
Size: 28KB - Virtual size: 28KB