0d19761707cc37999f0ea325f4706d3975b6c0e5df62f24722d4f2b7556e3f0e

Sharing

Copy URL Twitter E-mail

General

Target

0d19761707cc37999f0ea325f4706d3975b6c0e5df62f24722d4f2b7556e3f0e
Size

178KB
MD5

482bab995518b7eff1273fede592aa80
SHA1

f894e338ce01e76bad82e50cc1309b466b88daaa
SHA256

0d19761707cc37999f0ea325f4706d3975b6c0e5df62f24722d4f2b7556e3f0e
SHA512

cf31b0be061dce6be0353199552bfbfd2989ecc30992f1d89c19e846491f12aebe1a50ec653da8562f3fcbcbeab5eb65d55e507e2ca373d98bcf86210b7f9025
SSDEEP

3072:SRkWEGkQk9PQ5+bQLq1t0PyA//2PZwBP50eUj7OfIa3+J0u6+O8:4SGk9tMCALH2PZwZ5jUj7KIaa0u6+O8

Score

N/A

Malware Config

Signatures

Files

0d19761707cc37999f0ea325f4706d3975b6c0e5df62f24722d4f2b7556e3f0e
.exe windows x86

01f226ff5198faeec2a71252ecdfecf2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ExtractAssociatedIconA
ExtractIconExA
DoEnvironmentSubstW
ShellExecuteA
DragQueryPoint
DragQueryFileW
ShellAboutW
ExtractIconA

ole32

OleCreateStaticFromData
OleCreateFromFile
CoFileTimeToDosDateTime
CoTaskMemFree

advapi32

RegSetValueExW
RegFlushKey
RegRestoreKeyA
RegSaveKeyW
AddAuditAccessAceEx
CopySid
RegCreateKeyExW
GetFileSecurityW
GetSidLengthRequired

kernel32

WriteConsoleW
LoadLibraryW
HeapReAlloc
GetConsoleCP
FlushFileBuffers
SetFilePointer
HeapSize
SetStdHandle
RtlUnwind
SetLastError
FormatMessageA
GetCurrentProcess
GetACP
GetDriveTypeW
ReadConsoleOutputW
FindFirstFileExA
HeapCreate
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
GetLastError
GetDiskFreeSpaceA
GetLogicalDrives
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
GetCurrentThreadId
GetProcAddress
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
HeapFree
CreateFileW
CloseHandle
HeapAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
IsProcessorFeaturePresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeW
Sleep

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

01f226ff5198faeec2a71252ecdfecf2

Headers

DLL Characteristics

File Characteristics

Imports

shell32

ole32

advapi32

kernel32

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 113KB - Virtual size: 112KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 113KB - Virtual size: 112KB