ff727af8b49a09e753c628c80a7e32dd31dee2264d67db6199296ae603404923

Sharing

Copy URL

Twitter E-mail

General

Target

ff727af8b49a09e753c628c80a7e32dd31dee2264d67db6199296ae603404923
Size

184KB
MD5

58eda0393d08a2ccac1a17c79dd9d130
SHA1

bf7dc14eacf8444ec2155cab1839836fdfca6381
SHA256

ff727af8b49a09e753c628c80a7e32dd31dee2264d67db6199296ae603404923
SHA512

1d4d59a26a3d3123ad36f3b239a195267c43589fa1f313780cc3e2eef5e15850a852b9a2f7237cb5116046bae5421b7b145b19839a4ba68de41a7bfca862cc1b
SSDEEP

3072:OCtLhMQC7JtnNoOZIJ8pwPng6MJsVvhOs/KRnp9QDkMltJC:OkLhtCEPhO44QDZ/M

Score

N/A

Malware Config

Signatures

Files

ff727af8b49a09e753c628c80a7e32dd31dee2264d67db6199296ae603404923
.exe windows x86

d205087c01d31da86d9820dcc866b90d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

lz32

LZCopy
LZOpenFileA
LZClose

setupapi

SetupCopyOEMInfA
SetupFindFirstLineA
SetupOpenInfFileA
SetupCloseInfFile
SetupFindNextLine
SetupGetLineTextA
SetupGetStringFieldA
SetupGetTargetPathA

kernel32

CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
IsBadReadPtr
CreateFileA
GetModuleFileNameA
CloseHandle
WriteFile
GetFileInformationByHandle
DeleteFileA
CompareFileTime
SetFileAttributesA
GetFileAttributesA
GetTempFileNameA
CreateDirectoryA
FreeLibrary
WritePrivateProfileStringA
GetWindowsDirectoryA
GetShortPathNameA
GetProcAddress
LoadLibraryA
MoveFileA
GetVersionExA
GetSystemDirectoryA
WaitForSingleObject
CreateThread
Sleep
GetCurrentProcess
GetLastError
GetCurrentThread
MulDiv
GetExitCodeThread
TerminateThread
SetEvent
CreateEventA
GetPrivateProfileStringA
GetSystemDefaultLangID
GetUserDefaultLangID
CopyFileA
CreateProcessA
OpenEventA
FreeResource
WideCharToMultiByte
LockResource
LoadResource
FindResourceExA
LocalAlloc
InterlockedExchange
RaiseException
TerminateProcess
GetTimeZoneInformation
SetFilePointer
GetStringTypeW
GetStringTypeA
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
IsBadCodePtr
GetEnvironmentVariableA
FlushFileBuffers
GetFileType
GetStdHandle
SetHandleCount
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
FileTimeToSystemTime
GetCurrentDirectoryA
GetFullPathNameA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
HeapFree
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
FindClose

user32

MoveWindow
DispatchMessageA
KillTimer
EndDialog
FindWindowExA
SetWindowTextA
SendMessageA
SetTimer
LoadStringA
RedrawWindow
PostMessageA
DefWindowProcA
PostQuitMessage
FindWindowA
BeginPaint
GetClientRect
DrawTextA
GetDesktopWindow
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
GetWindowInfo
DialogBoxParamA
MessageBoxA
GetMessageA
TranslateMessage
DestroyWindow
SetCursor
CreateWindowExA
GetWindowRect
EndPaint

gdi32

GetDeviceCaps
CreateFontA
DeleteObject
Rectangle
GetStockObject
GetObjectA
CreatePen
SelectObject
CreateSolidBrush
SetTextColor
GetTextMetricsA

shell32

ShellExecuteA

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d205087c01d31da86d9820dcc866b90d

Headers

File Characteristics

Imports

version

lz32

setupapi

kernel32

user32

gdi32

shell32

Sections

.text Size: 56KB - Virtual size: 54KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 16KB - Virtual size: 18KB

.rsrc Size: 100KB - Virtual size: 100KB

.text
Size: 56KB - Virtual size: 54KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 16KB - Virtual size: 18KB

.rsrc
Size: 100KB - Virtual size: 100KB