9132994139ee3ef105f06a46cee46f6ebc2d99cf234fffd884fe46f16ff2ca5b

General

Target

9132994139ee3ef105f06a46cee46f6ebc2d99cf234fffd884fe46f16ff2ca5b
Size

95KB
MD5

3913304824881a72aef029a3b7171400
SHA1

db0b5fcabb633736f2223fdd50a58782f77afcdf
SHA256

9132994139ee3ef105f06a46cee46f6ebc2d99cf234fffd884fe46f16ff2ca5b
SHA512

520a500b3c490ecf0c396efa92d91e1ac83272b225afa56be41682da016e5446a2d9ac0cc709e000ca646bd8e296dba5d63aa62ca721b534cbf01b7455614b18
SSDEEP

1536:0SR6G03vG38m9ICGW0JhpmIYfURh5BNUtVwgWhJY6AGOmageE/yWf27ur:T903KH9IvPpTDRzBNUwoeEfE/yW+7K

Score

N/A

Malware Config

Signatures

Files

9132994139ee3ef105f06a46cee46f6ebc2d99cf234fffd884fe46f16ff2ca5b
.exe windows x86

bf20a4be710f22502bdd46f5c3fde96d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_controlfp
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
srand
time
rand
??2@YAPAXI@Z
memmove
_c_exit
_exit
_acmdln
exit
_cexit
_XcptFilter
??3@YAXPAX@Z

kernel32

GetModuleHandleA
LocalAlloc
InterlockedDecrement
CompareFileTime
FileTimeToSystemTime
GetLocalTime
SystemTimeToFileTime
InterlockedIncrement
HeapAlloc
HeapReAlloc
HeapSize
GetProcessHeap
GetStartupInfoA

user32

LoadStringW
RegisterClassW
CreateWindowExW
GetMessageW
TranslateMessage
DispatchMessageW
KillTimer
DefWindowProcW
GetSystemMetrics
DestroyWindow
SetTimer
PostQuitMessage

shell32

SHGetPathFromIDListW
SHGetDesktopFolder
SHGetMalloc

ole32

CoTaskMemAlloc
OleInitialize
OleUninitialize
CoCreateInstance

shlwapi

SHRegGetUSValueW
PathFindFileNameW
StrCmpNW
StrCpyNW
StrCmpW
PathRemoveFileSpecW
PathFileExistsW
StrCatBuffW
PathAppendW
wnsprintfW
SHRegSetUSValueW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bf20a4be710f22502bdd46f5c3fde96d

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

shell32

ole32

shlwapi

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 92B

.rsrc Size: 77KB - Virtual size: 80KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 92B

.rsrc
Size: 77KB - Virtual size: 80KB