242e60a9c0ecb5327166176f53893d1b878025b76a7117e8803a40b3ac12121e

Sharing

Copy URL Twitter E-mail

General

Target

242e60a9c0ecb5327166176f53893d1b878025b76a7117e8803a40b3ac12121e
Size

100KB
MD5

277f7610a72ac0d6a29f164df8dd1bc7
SHA1

bc8c8c7748102d092c0e868e5d8e48da9a72e71c
SHA256

242e60a9c0ecb5327166176f53893d1b878025b76a7117e8803a40b3ac12121e
SHA512

92201b37811080c2746347f57afa3ecc8a7be245fb2de217690e7cc92ae4355314cb702515e9cfbc33e0a295d02074c708ad22cdf11ec50f5f0d7ac004f0fee9
SSDEEP

1536:Jdvy3tA9CS+Czcc/OlqMH7kQrPtcwUMNC7ccuUijwQ51fJo4E:jy3toCHNbk8mwUMNC9uULYRJo4E

Score

N/A

Malware Config

Signatures

Files

242e60a9c0ecb5327166176f53893d1b878025b76a7117e8803a40b3ac12121e
.exe windows x86

ec808d5fd1b1ec715ce7eb5b2f4152ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr71

wcsrchr
wcstoul
wcscat
strncmp
swprintf
_vsnwprintf
realloc
memmove
strlen
strchr
wcsncmp
vswprintf
_controlfp
_onexit
__dllonexit
__security_error_handler
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_amsg_exit
__p___winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
memset
__CxxFrameHandler
malloc
free
wcslen
wcscpy
_wcsicmp
printf
wprintf
memcmp

kernel32

GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentProcess
GetProcessAffinityMask
VirtualQuery
VirtualAlloc
OutputDebugStringW
OutputDebugStringA
GetTickCount
FindFirstFileA
FindClose
GetDateFormatW
GetDateFormatA
RemoveDirectoryW
RemoveDirectoryA
CreateDirectoryW
CreateDirectoryA
CreateSemaphoreW
QueryPerformanceCounter
ExitProcess
GetModuleHandleA
GetLastError
ReadFile
lstrlenA
MultiByteToWideChar
lstrlenW
CloseHandle
RaiseException
GetProcAddress
LocalFree
LocalAlloc
FatalAppExitA
FatalAppExitW
CreateMutexA
CreateMutexW
CreateEventA
CreateEventW
OpenEventA
OpenEventW
GetModuleHandleW
GetFileAttributesA
GetFileAttributesW
SetFileAttributesA
SetFileAttributesW
GetEnvironmentVariableA
GetEnvironmentVariableW
SetEnvironmentVariableA
SetEnvironmentVariableW
CreateFileMappingA
CreateFileMappingW
OpenFileMappingA
OpenFileMappingW
CreateProcessA
CreateProcessW
lstrcatW
lstrcpyW
FreeLibrary
OpenProcess
GetSystemInfo
WriteFile
FindResourceW
FindFirstFileW
GetSystemDirectoryA
GetSystemDirectoryW
GetWindowsDirectoryA
GetWindowsDirectoryW
FindNextFileA
FindNextFileW
GetCommandLineW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetVersionExA
GetVersionExW
GetComputerNameA
GetComputerNameW
WideCharToMultiByte
GetCPInfo
EnumResourceLanguagesW
GetCurrentDirectoryA
GetCurrentDirectoryW
GetTempPathA
GetTempPathW
GetFullPathNameA
GetFullPathNameW
GetTempFileNameA
GetTempFileNameW
SetLastError
FindResourceA
CreateSemaphoreA
GetDiskFreeSpaceExA
GetDiskFreeSpaceExW
FindFirstChangeNotificationA
FindFirstChangeNotificationW
LoadLibraryExA
LoadLibraryExW
FormatMessageA
FormatMessageW
SearchPathA
SearchPathW
GetPrivateProfileIntA
GetPrivateProfileIntW
GetPrivateProfileStringA
GetPrivateProfileStringW
WritePrivateProfileStringA
WritePrivateProfileStringW
GetFileType
CreateFileA
CreateFileW
CopyFileA
CopyFileW
MoveFileA
MoveFileW
DeleteFileA
MoveFileExW
DeleteFileW
GetDriveTypeA
GetDriveTypeW
GetVolumeInformationA
GetVolumeInformationW
GetStdHandle

shlwapi

PathCombineW

mscoree

LoadLibraryShim

advapi32

RegisterEventSourceA
ReportEventW
DeregisterEventSource
LookupAccountNameW
LookupAccountNameA
LookupAccountSidW
LookupAccountSidA
CryptAcquireContextA
RegQueryValueExW
RegReplaceKeyW
RegReplaceKeyA
RegRestoreKeyW
RegRestoreKeyA
RegUnLoadKeyW
RegUnLoadKeyA
RegLoadKeyW
RegLoadKeyA
RegDeleteValueW
RegDeleteValueA
RegQueryValueW
RegQueryValueA
RegCreateKeyExW
RegCreateKeyExA
RegSetValueExW
RegSetValueExA
RegDeleteKeyW
RegDeleteKeyA
SetFileSecurityW
SetFileSecurityA
LookupPrivilegeValueW
LookupPrivilegeValueA
RegOpenKeyExW
RegOpenKeyExA
RegCloseKey
RegEnumValueW
RegEnumValueA
GetUserNameW
GetUserNameA
RegQueryValueExA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegEnumKeyExW
RegEnumKeyExA

user32

CharPrevW
SendMessageA
SetWindowLongW
GetWindowLongW
CallWindowProcA
SystemParametersInfoA
GetWindowTextA
GetWindowTextW
PeekMessageA
PeekMessageW
DispatchMessageA
DispatchMessageW
PostMessageA
PostMessageW
GetClassNameA
GetClassNameW
DefWindowProcA
DefWindowProcW
TranslateAcceleratorA
TranslateAcceleratorW
GetWindowLongA
SetWindowLongA
IsDialogMessageA
IsDialogMessageW
GetMessageA
GetMessageW
LoadStringA
LoadStringW
GetUserObjectInformationW
GetProcessWindowStation
SendMessageW
LoadMenuA
LoadMenuW
GetClassInfoA
GetClassInfoW
RegisterClassA
RegisterClassW
CreateWindowExA
CreateWindowExW
LoadAcceleratorsA
LoadAcceleratorsW
LoadImageA
LoadImageW
MessageBoxA
MessageBoxW
CreateDialogParamA
CreateDialogParamW
DialogBoxParamA
DialogBoxParamW
LoadIconA
LoadIconW
LoadCursorA
LoadCursorW
SetWindowTextA
SetWindowTextW
SetDlgItemTextA
SetDlgItemTextW
GetDlgItem
SendDlgItemMessageW

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ldata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ec808d5fd1b1ec715ce7eb5b2f4152ad

Headers

File Characteristics

Imports

msvcr71

kernel32

shlwapi

mscoree

advapi32

user32

Sections

.text Size: 68KB - Virtual size: 64KB

.data Size: 4KB - Virtual size: 272B

.rsrc Size: 4KB - Virtual size: 1KB

.ldata Size: 20KB - Virtual size: 20KB

.text
Size: 68KB - Virtual size: 64KB

.data
Size: 4KB - Virtual size: 272B

.rsrc
Size: 4KB - Virtual size: 1KB

.ldata
Size: 20KB - Virtual size: 20KB