a503681d40c61ed77e36a2cc6dfa713744754a46907f6be4072e55f06cd4446e

Sharing

Copy URL

Twitter E-mail

General

Target

a503681d40c61ed77e36a2cc6dfa713744754a46907f6be4072e55f06cd4446e
Size

5.8MB
MD5

9e28a598e94be94921938cb38162b5f5
SHA1

d5255f860653112c66d6158a4cee6de51fd3cd0f
SHA256

a503681d40c61ed77e36a2cc6dfa713744754a46907f6be4072e55f06cd4446e
SHA512

0cd61bcc67371965708e924190271a2ca3da7838248aa38d8730c031c3e24ff2963063d9b25fd06f5ed702867ca7e834806ed723eee0aa41db3670d228325430
SSDEEP

98304:Og2iA8+gmkdHaGVG8U0L23Scg0kNZVf2wDCTVcYQC/8V/ncQ1nO6UAahTuvgfC:5vmkdHaSG8Ahg0eZVfFeTVju/ncQdAAG

Score

N/A

Malware Config

Signatures

Files

a503681d40c61ed77e36a2cc6dfa713744754a46907f6be4072e55f06cd4446e
.exe windows x86

aafc1c43fef964d24ce6db9ab7db0513

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetVersion
GetVersionExA
GetVersion
lstrcpyA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

EnableScrollBar

advapi32

RegCloseKey

oleaut32

SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

SetBkMode

comctl32

ImageList_Create

opengl32

glIsList

shell32

ShellExecuteA

Exports

Exports

DeleteTempFiles
GetEnvironmentVariables
GetModuleNameByProcessID
IsOnWow64
IsWrongOS
KernelCount
LastPos
RegDelValue
SetTheReg

Sections

CODE
Size: - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aafc1c43fef964d24ce6db9ab7db0513

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

gdi32

comctl32

opengl32

shell32

Exports

Exports

Sections

CODE Size: - Virtual size: 346KB

DATA Size: - Virtual size: 3.2MB

BSS Size: - Virtual size: 3KB

.idata Size: - Virtual size: 8KB

.edata Size: - Virtual size: 270B

.tls Size: - Virtual size: 16B

.rdata Size: - Virtual size: 24B

.vmp0 Size: - Virtual size: 3.3MB

.vmp1 Size: 5.8MB - Virtual size: 5.8MB

.reloc Size: 512B - Virtual size: 408B

CODE
Size: - Virtual size: 346KB

DATA
Size: - Virtual size: 3.2MB

BSS
Size: - Virtual size: 3KB

.idata
Size: - Virtual size: 8KB

.edata
Size: - Virtual size: 270B

.tls
Size: - Virtual size: 16B

.rdata
Size: - Virtual size: 24B

.vmp0
Size: - Virtual size: 3.3MB

.vmp1
Size: 5.8MB - Virtual size: 5.8MB

.reloc
Size: 512B - Virtual size: 408B