abef495196ef991e9fa37c9fff75855cae2cc22d271bc193a446ee36f1199d77

General

Target

abef495196ef991e9fa37c9fff75855cae2cc22d271bc193a446ee36f1199d77
Size

80KB
MD5

28f29e94ae32156486e9b64ec6d7cdd0
SHA1

8aef3cf03f15191732b4d79180794cc3b2a15975
SHA256

abef495196ef991e9fa37c9fff75855cae2cc22d271bc193a446ee36f1199d77
SHA512

3fc3277cddc789082a2a45f95c31d7af2b271fd499f22ea011125a4cfd8bddd47a0a4cf41d1a364e265bb83427db1f25fc01d5355cc88aa067067c9c7df98f5e
SSDEEP

1536:3XtqRh3UYqlGhtD7eU+77ayvk6sRdWOnfyPZ3:3XORUYqlMD7eU+72B6s+iyZ

Score

N/A

Malware Config

Signatures

Files

abef495196ef991e9fa37c9fff75855cae2cc22d271bc193a446ee36f1199d77
.exe windows x86

a540b6b0e942a2dccf140344013e1d85

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegNotifyChangeKeyValue
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA

wininet

InternetTimeToSystemTime
InternetTimeFromSystemTime

kernel32

MultiByteToWideChar
GetStartupInfoA
GetModuleHandleA
CloseHandle
CreateProcessA
WaitForMultipleObjects
CreateEventA
lstrcatA
lstrlenA
GetModuleFileNameA
GetLastError
CreateMutexA
GetCommandLineA
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
ReadFile
SetHandleInformation
CreatePipe
WriteFile
SetFilePointer
CreateFileA
GetTempPathA
GetThreadLocale
FreeLibrary
GetProcAddress
LoadLibraryA
SystemTimeToTzSpecificLocalTime
GetSystemTime
GetVersionExA
lstrcmpiA
SetEvent
WideCharToMultiByte
lstrlenW
GetCurrentProcess

user32

wsprintfA

ole32

CLSIDFromString
CoUninitialize
CoTaskMemFree
StringFromCLSID
CoCreateGuid
CoInitialize

msvcrt

strstr
fclose
_stricmp
_controlfp
__set_app_type
__p__fmode
__p__commode
sprintf
srand
??3@YAXPAX@Z
mktime
localtime
time
asctime
_adjust_fdiv
fgetc
strncpy
malloc
fopen
__CxxFrameHandler
_EH_prolog
_exit
rand
sscanf
free
exit
_except_handler3
__getmainargs
_XcptFilter
__setusermatherr
_acmdln
_initterm

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a540b6b0e942a2dccf140344013e1d85

Headers

File Characteristics

Imports

advapi32

wininet

kernel32

user32

ole32

msvcrt

Sections

.text Size: 16KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 56KB - Virtual size: 56KB

.text
Size: 16KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 56KB - Virtual size: 56KB