5476eef2bad48e38d46a895aaab577f5662bc148dba201387eab80caa83b1cfb

Sharing

Copy URL Twitter E-mail

General

Target

5476eef2bad48e38d46a895aaab577f5662bc148dba201387eab80caa83b1cfb
Size

98KB
MD5

18ddde47760f6b8c068d5e04b7678d10
SHA1

87de797a46f6752fcb61cca825ac91f19aa06c1d
SHA256

5476eef2bad48e38d46a895aaab577f5662bc148dba201387eab80caa83b1cfb
SHA512

346e996f86a370ba0b455007a110b271cc27a4b92fbac6f6d9f45a4778b9779d58df1ef5cd51e044928961ba1a4ad290fb09c1b6242b9a3441029ee256213062
SSDEEP

1536:1HTWuOv/k8q02xcTsV6rYCUnh2eI/Ipnw7Hnx6aD/FNlKwu0Yvpe8aDYRK+aDaCe:1auOv/vqdomLI/jLjltYvpe8a9I

Score

N/A

Malware Config

Signatures

Files

5476eef2bad48e38d46a895aaab577f5662bc148dba201387eab80caa83b1cfb
.exe windows x86

2c0857dc52cb3d0ea09ed52bcd4afbc8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrCmpIW
PathAppendW
PathRemoveFileSpecW
StrCpyNW
StrCatW

kernel32

GetTickCount
QueryPerformanceCounter
GetLastError
CreateMutexW
CloseHandle
ReleaseMutex
WaitForSingleObject
GetProcAddress
LoadLibraryW
GetFileAttributesW
OpenProcess
GetModuleHandleW
FreeLibrary
CreateThread
HeapFree
SetEnvironmentVariableW
HeapAlloc
GetCurrentThreadId
GetEnvironmentVariableW
GetPrivateProfileIntW
GetModuleFileNameW
ResetEvent
TerminateProcess
GetCurrentProcess
WaitForMultipleObjects
GetCurrentProcessId
CreateEventW
Sleep
SetEvent
OpenEventW
OutputDebugStringW
GetCommandLineW
ExitProcess
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
GetProcessHeap
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
SetUnhandledExceptionFilter

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

CommandLineToArgvW

msvcr80

_purecall
wcsrchr
_wcsicmp
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
??3@YAXPAX@Z
memset

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2c0857dc52cb3d0ea09ed52bcd4afbc8

Headers

File Characteristics

Imports

shlwapi

kernel32

advapi32

shell32

msvcr80

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 79KB - Virtual size: 80KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 79KB - Virtual size: 80KB