f2f7051c1e86c41c76e46b0695267926190e3ccfa733e8826a5d047425b89e16

Sharing

Copy URL

Twitter E-mail

General

Target

f2f7051c1e86c41c76e46b0695267926190e3ccfa733e8826a5d047425b89e16
Size

252KB
MD5

5313b3fe6248080395e025e5f5f0b680
SHA1

3ddfb023dd4b6812bb0c6f018b91c32096810409
SHA256

f2f7051c1e86c41c76e46b0695267926190e3ccfa733e8826a5d047425b89e16
SHA512

b20637757db67ae2132d1d4d0a77cfab0750b14d68a923d3b97ef86c8bb4ff144d5332bd674dcc91e4cc463bfb4a439c455bd5a88f7d4e31389d20b8ddc05eac
SSDEEP

6144:qBPNLaktTjJZO1CsyQEkXSQE1e1yeDwbjl:CNzjJZO1Cs2kgfeGx

Score

N/A

Malware Config

Signatures

Files

f2f7051c1e86c41c76e46b0695267926190e3ccfa733e8826a5d047425b89e16
.exe windows x86

94bb82ba2f2c747be921189d8f40018f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo

shlwapi

SHDeleteKeyA

kernel32

GetModuleHandleA
GetLocalTime
GetPrivateProfileStringA
GetProfileIntA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
Sleep
CloseHandle
CreateFileA
MultiByteToWideChar
GetProcAddress
LoadLibraryA
GetLastError
lstrcpynA
lstrlenA
lstrcmpiA
lstrcpyA
GetCurrentProcess
ReadFile
WriteConsoleA
SetStdHandle
GetVersionExA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
FreeLibrary
TlsFree
InitializeCriticalSection
RtlUnwind
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
TlsGetValue
TlsAlloc
TlsSetValue
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapSize
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

advapi32

RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

94bb82ba2f2c747be921189d8f40018f

Headers

File Characteristics

Imports

setupapi

shlwapi

kernel32

advapi32

shell32

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 1KB

.text Size: 168KB - Virtual size: 168KB

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 1KB

.text
Size: 168KB - Virtual size: 168KB