af225270edb07bf20fbfe64fabaa99452f46c2319c7d81f0785520393b0aa079

Sharing

Copy URL Twitter E-mail

General

Target

af225270edb07bf20fbfe64fabaa99452f46c2319c7d81f0785520393b0aa079
Size

200KB
MD5

65d7144aad219a113efb173c89fdbf77
SHA1

8a2f2d5bbf2d289a602fcea74b65f57c89deb654
SHA256

af225270edb07bf20fbfe64fabaa99452f46c2319c7d81f0785520393b0aa079
SHA512

f1f646f8ad5e86cbd3db315a3a337584a0d87ddf9f38c34525714f8391161da709755fe00c5d163ea26ed79ebe1b8f79876c14ba1e02f6d627587b916401f469
SSDEEP

1536:ZzHfUGMNiunKsRb7sj05rLreJA4j0xPsciQ38a6tFcjjDhrHLzn/euPD:p/mb42DiQ38a6tFOr3/eu7

Score

N/A

Malware Config

Signatures

Files

af225270edb07bf20fbfe64fabaa99452f46c2319c7d81f0785520393b0aa079
.exe windows x86

8d5c2bf1d9a4f650dace32db1821a71c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathAppendW

shell32

SHGetFolderPathW

user32

MessageBoxW

advapi32

RegisterServiceCtrlHandlerW
DeleteService
ControlService
OpenServiceW
CloseServiceHandle
StartServiceW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
StartServiceCtrlDispatcherW
SetServiceStatus
OpenSCManagerW
CreateServiceW

wininet

InternetOpenW
HttpOpenRequestW
HttpAddRequestHeadersW
InternetCloseHandle
HttpSendRequestW
HttpQueryInfoW
InternetConnectW

kernel32

WriteConsoleW
CreateFileA
CompareStringA
CompareStringW
GetACP
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
RtlUnwind
GetConsoleMode
GetConsoleCP
HeapReAlloc
VirtualAlloc
WriteFile
GetExitCodeProcess
TerminateProcess
CreateDirectoryW
GetLastError
SetFilePointer
WideCharToMultiByte
FlushFileBuffers
CreateFileW
CloseHandle
CreatePipe
GetEnvironmentVariableW
CreateProcessW
PeekNamedPipe
ReadFile
WaitForSingleObject
SetEndOfFile
Sleep
GetCurrentDirectoryW
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
ExitProcess
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
SetEnvironmentVariableA
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
RaiseException
GetTimeZoneInformation
MultiByteToWideChar
GetTimeFormatA
GetDateFormatA
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8d5c2bf1d9a4f650dace32db1821a71c

Headers

File Characteristics

Imports

shlwapi

shell32

user32

advapi32

wininet

kernel32

Sections

.text Size: 64KB - Virtual size: 63KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 80KB - Virtual size: 100KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 80KB - Virtual size: 100KB