2f12f8812a7b0aa4f756729651cb839971843cb6ad61a1d379499ab1aab9c987

Sharing

Copy URL Twitter E-mail

General

Target

2f12f8812a7b0aa4f756729651cb839971843cb6ad61a1d379499ab1aab9c987
Size

140KB
MD5

36a6041e551436fd08cb8e91efd83550
SHA1

709b88bf3d7cbab3a32c2147dcb03df1fa7fcab1
SHA256

2f12f8812a7b0aa4f756729651cb839971843cb6ad61a1d379499ab1aab9c987
SHA512

28bbeefb23a1c06d5eba0b88e224d87f0467d67d0ae91f854230724a0018c905ae73268eb7cfa1a09158033504293802cf8391296f34a59fa2477a49dceee223
SSDEEP

3072:MJ2Zs/LuZSDuY7di20vGYy6Jx+GS6unN/R3O0KBtMh6SF:3K/6MDJ7di8Yv8GSTJ+tty6g

Score

N/A

Malware Config

Signatures

Files

2f12f8812a7b0aa4f756729651cb839971843cb6ad61a1d379499ab1aab9c987
.exe windows x86

a625b047b81e0d6ab05fce26f9efd5ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
GetWindowsDirectoryA
MoveFileA
GetFileAttributesA
GetModuleFileNameA
Sleep
DeleteFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
HeapAlloc
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
CloseHandle
ReadFile
SetFilePointer
FlushFileBuffers
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapSize
SetStdHandle
CreateFileA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
RtlUnwind
SetEndOfFile
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetFullPathNameA
GetCurrentDirectoryA
GetTimeZoneInformation
CompareStringW
SetEnvironmentVariableA

advapi32

RegSetValueExA
RegDeleteValueA
RegCreateKeyExA

Exports

Exports

NR_RegAddKey
NR_RegAddKeyRaw
NR_RegClose
NR_RegDeleteEntry
NR_RegDeleteKey
NR_RegDeleteKeyRaw
NR_RegEnumEntries
NR_RegEnumSubkeys
NR_RegFlush
NR_RegGetEntry
NR_RegGetEntryInfo
NR_RegGetEntryString
NR_RegGetKey
NR_RegGetKeyRaw
NR_RegGetUsername
NR_RegIsWritable
NR_RegOpen
NR_RegSetBufferSize
NR_RegSetEntry
NR_RegSetEntryString
NR_RegSetUsername
NR_ShutdownRegistry
NR_StartupRegistry
VR_Close
VR_CreateRegistry
VR_Enum
VR_EnumUninstall
VR_GetDefaultDirectory
VR_GetPath
VR_GetRefCount
VR_GetUninstallUserName
VR_GetVersion
VR_InRegistry
VR_Install
VR_Remove
VR_SetDefaultDirectory
VR_SetRefCount
VR_SetRegDirectory
VR_UninstallAddFileToList
VR_UninstallCreateNode
VR_UninstallDeleteFileFromList
VR_UninstallDeleteSharedFilesKey
VR_UninstallDestroy
VR_UninstallEnumSharedFiles
VR_UninstallFileExistsInList
VR_ValidateComponent

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a625b047b81e0d6ab05fce26f9efd5ef

Headers

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 80KB - Virtual size: 80KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 80KB - Virtual size: 80KB