129c6a498b0dec5ae7c7d53667bd62634b2fd719db0b6fab6c6816c13395f30e

Sharing

Copy URL Twitter E-mail

General

Target

129c6a498b0dec5ae7c7d53667bd62634b2fd719db0b6fab6c6816c13395f30e
Size

108KB
MD5

11bf528436d0c62c1a6d4bfb7d6b4b7e
SHA1

cd941ccc26547cf553f9726a68383cef7a0dd59c
SHA256

129c6a498b0dec5ae7c7d53667bd62634b2fd719db0b6fab6c6816c13395f30e
SHA512

8b2b0dfe479d83b9adb2d120aaad5daedd1071364ee94933aaf879340d42031534a38f6159e4a8fe0f424d12c2ba833df4a9b6e3e33f62fc7527ecd2646c2494
SSDEEP

1536:36+ORbKLB4DPsS9c78kqtI7UM8N+LAUA9djBlP/GGCq2iW7z:3EbK0WAkqt/nlPOGCH

Score

N/A

Malware Config

Signatures

Files

129c6a498b0dec5ae7c7d53667bd62634b2fd719db0b6fab6c6816c13395f30e
.exe windows x86

7adbcfc556765826c67c23212c1e2541

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
GetCommandLineW
ExitProcess
LCMapStringW
LCMapStringA
FindFirstFileW
GetStringTypeA
WideCharToMultiByte
GetLocaleInfoA
HeapSize
GetPrivateProfileStringW
SetCurrentDirectoryW
CreateProcessW
WritePrivateProfileStringW
GetStringTypeW
LocalFree
RtlUnwind
HeapReAlloc
VirtualAlloc
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
Sleep
GetCPInfo
GetACP
GetOEMCP

user32

GetMessageW
LoadIconW
LoadCursorW
RegisterClassExW
CreateWindowExW
PostQuitMessage
DialogBoxParamW
MessageBoxW
TranslateMessage
DispatchMessageW
GetDlgItem
SetWindowTextW
EndDialog
DefWindowProcW

comdlg32

GetOpenFileNameW

advapi32

RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW

shell32

ShellExecuteW
CommandLineToArgvW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�L?��u�
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7adbcfc556765826c67c23212c1e2541

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

shell32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 40KB - Virtual size: 39KB

�L?��u� Size: 20KB - Virtual size: 20KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 40KB - Virtual size: 39KB

�L?��u�
Size: 20KB - Virtual size: 20KB