38dc719336e30a425cd989d98065df1268b18f3efeb4a854599850a11e38e37f

Sharing

Copy URL Twitter E-mail

General

Target

38dc719336e30a425cd989d98065df1268b18f3efeb4a854599850a11e38e37f
Size

297KB
MD5

bd2aeb3c65ba3901238a2b9ae48b4337
SHA1

94a7150b821118e02bf7464cd6260f4e50b9334e
SHA256

38dc719336e30a425cd989d98065df1268b18f3efeb4a854599850a11e38e37f
SHA512

1d08791993d8aee1d2eb9034ad735756b9fbeb28f2d885bd9ec85b07685c5fbf393e931f27b87b666f6fe549631d03c1e2ac14b83b5c5ba98cf38bb29e232382
SSDEEP

6144:ZueGIA+ILnIlnzohjXZJtU9wkcPl7AVzjH:lQx7IlnzipJtU9wkAl7AV

Score

N/A

Malware Config

Signatures

Files

38dc719336e30a425cd989d98065df1268b18f3efeb4a854599850a11e38e37f
.exe windows x86

50426ce9ef1fabeba866854aac2c1a37

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
ReadFile
GetProcAddress
GetModuleHandleW
GetCurrentProcess
FreeLibrary
LoadLibraryW
lstrlenA
FindClose
FindFirstFileW
GetPrivateProfileStringW
InitializeCriticalSection
WritePrivateProfileStringW
MultiByteToWideChar
Sleep
lstrlenW
GetExitCodeProcess
WideCharToMultiByte
CreateSemaphoreW
ReleaseSemaphore
CompareStringW
GetProcessHeap
lstrcpyW
LocalFree
GetModuleFileNameW
GetCommandLineW
GetPrivateProfileIntW
GetLastError
SetEndOfFile
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
LCMapStringW
HeapReAlloc
CreateFileW
WriteConsoleW
SetFilePointer
GetLocaleInfoW
InterlockedExchange
SetConsoleCtrlHandler
SetStdHandle
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTimeZoneInformation
FatalAppExitA
FlushFileBuffers
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetStdHandle
WriteFile
SetEnvironmentVariableA
RtlUnwind
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
RaiseException
EncodePointer
DecodePointer
GetTimeFormatA
GetDateFormatA
HeapSetInformation
GetStartupInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
CloseHandle
EnterCriticalSection
LeaveCriticalSection
HeapCreate
HeapDestroy
ExitProcess

user32

wsprintfW

advapi32

RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryValueExW

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
CommandLineToArgvW
ShellExecuteExW

ole32

CoInitializeEx
CoCreateInstance
CoInitializeSecurity
CoSetProxyBlanket

oleaut32

VariantInit
SysAllocStringLen
SysFreeString
SysAllocString
VariantClear

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

shlwapi

StrStrIW

winhttp

WinHttpOpen
WinHttpSendRequest
WinHttpOpenRequest
WinHttpConnect
WinHttpCrackUrl
WinHttpCloseHandle
WinHttpReceiveResponse
WinHttpSetOption
WinHttpGetProxyForUrl
WinHttpQueryHeaders
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpSetStatusCallback

Sections

.text
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50426ce9ef1fabeba866854aac2c1a37

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

version

shlwapi

winhttp

Sections

.text Size: 248KB - Virtual size: 248KB

.rdata Size: 30KB - Virtual size: 30KB

.data Size: 6KB - Virtual size: 14KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 248KB - Virtual size: 248KB

.rdata
Size: 30KB - Virtual size: 30KB

.data
Size: 6KB - Virtual size: 14KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 9KB - Virtual size: 8KB