f7a664e88e58b71a076ad5c82b7e89db4f0f0cc77625b7cc416213b8dc0bce5f

Sharing

Copy URL Twitter E-mail

General

Target

f7a664e88e58b71a076ad5c82b7e89db4f0f0cc77625b7cc416213b8dc0bce5f
Size

223KB
MD5

b1b3932e0c4e1fd4c4925eec58640746
SHA1

dab80326be9b792a5c77195744ae3a25b6190a6a
SHA256

f7a664e88e58b71a076ad5c82b7e89db4f0f0cc77625b7cc416213b8dc0bce5f
SHA512

e2c4af0ced91983a383d13fa7aab5c8ed11313da30e232dd0c68bb9c3085ecda7e8bbea265f9753c9d00e8072634206e4355d8d50ef7698cdcf5441eb8e03166
SSDEEP

6144:ribUondJcchOPHZLFBSFyKqT/NGLo7mQeO+v/nrEC7dx:GbUodMNPNGx/ICJ

Score

N/A

Malware Config

Signatures

Files

f7a664e88e58b71a076ad5c82b7e89db4f0f0cc77625b7cc416213b8dc0bce5f
.exe windows x86

6c8aaa413e9ef7e646844a1255d66790

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetForegroundWindow
DdeFreeStringHandle
DdeDisconnectList
DdeQueryNextServer
DdeDisconnect
AllowSetForegroundWindow
DdeInitializeW
DdeCreateStringHandleW
DdeClientTransaction
DdeQueryConvInfo
GetParent
IsIconic
ShowWindow
GetDesktopWindow
SendNotifyMessageW
DdeUninitialize
DdeFreeDataHandle
DdeUnaccessData
DdeConnectList
DdeAccessData

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
ReadFile
SetFilePointer
CloseHandle
MultiByteToWideChar
GetACP
ExpandEnvironmentStringsW
GlobalAlloc
GlobalFree
DebugBreak
GetLastError
CreateFileMappingW
GetFileAttributesW
GetUserDefaultLangID
ExitProcess
ReleaseMutex
GetCommandLineW
CreateFileW
CreateMutexW
CreateProcessW
GetModuleFileNameW
LoadLibraryA
GetModuleHandleA
LoadLibraryW
GetModuleHandleW
GetProcAddress
GetVersion
SetLastError
OutputDebugStringA
HeapAlloc
GetCurrentProcessId
HeapFree
GetProcessHeap
GetSystemTimeAsFileTime
VirtualProtect
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
RaiseException
InterlockedExchange

advapi32

RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegCloseKey
RegisterEventSourceW
ReportEventW
DeregisterEventSource

ole32

CoCreateInstance
CoInitialize
StgOpenStorage
CoUninitialize
CoFileTimeNow

shell32

ShellExecuteExW
SHGetSpecialFolderPathW

msvcr90

_adjust_fdiv
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_controlfp_s
_invoke_watson
_decode_pointer
_onexit
_lock
memset
vswprintf_s
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

PACK
Size: 160KB - Virtual size: 416KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6c8aaa413e9ef7e646844a1255d66790

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

advapi32

ole32

shell32

msvcr90

Sections

.text Size: 57KB - Virtual size: 57KB

.data Size: 512B - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

PACK Size: 160KB - Virtual size: 416KB

.text
Size: 57KB - Virtual size: 57KB

.data
Size: 512B - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB

PACK
Size: 160KB - Virtual size: 416KB