724ce85718e7e4005b97e50a8635d9930033dff99dc6275935f7a8d3a64980d4

Sharing

Copy URL

Twitter E-mail

General

Target

724ce85718e7e4005b97e50a8635d9930033dff99dc6275935f7a8d3a64980d4
Size

128KB
MD5

c7623bf7fce248f61126d99dcab43df9
SHA1

b8a512a9bd6ead30ebc81478a7a47181a89ca278
SHA256

724ce85718e7e4005b97e50a8635d9930033dff99dc6275935f7a8d3a64980d4
SHA512

8562c5f21b27f9458e3d47e6c2b40adf0776303c3c9187e524dd147df472d187ff6e3156494adcafa9ec6926358c7f38f21a2809bbb22f75d8a2dae8d8076191
SSDEEP

3072:rqU6oKBgqdUlfZgSpi+0i9KcOvTWiIqFTHGubbKs75:rB4BMHni+0SKcsjFqubbKs7

Score

N/A

Malware Config

Signatures

Files

724ce85718e7e4005b97e50a8635d9930033dff99dc6275935f7a8d3a64980d4
.exe windows x86

2db47be23a09c3c98d8256fbec60c0a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
HeapFree
HeapDestroy
HeapAlloc
GetVersionExA
GetTickCount
GetSystemTimeAsFileTime
GetProcessHeap
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetCurrentProcessId
GetCurrentProcess
EnterCriticalSection
DeleteCriticalSection
CreateThread
InterlockedCompareExchange
CreateEventA
CloseHandle
GetProcAddress
ExitProcess
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetStringTypeW
GetCPInfo
WriteFile
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LocalAlloc
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
GetEnvironmentStrings
ReadFile
Sleep
UnhandledExceptionFilter
lstrcmpiA
CreateFileA
lstrlenA
RtlUnwind
VirtualFree
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapCreate

user32

PeekMessageA
wsprintfA
GetParent
BeginPaint
KillTimer
MessageBoxA
GetWindowTextLengthA
PostMessageA
PostQuitMessage
SetTimer
TranslateMessage

advapi32

RegEnumKeyExA
SetEntriesInAclA
SetSecurityDescriptorDacl
AllocateAndInitializeSid
FreeSid
GetLengthSid
GetTokenInformation
InitializeSecurityDescriptor
RegCloseKey
RegCreateKeyExA
RegEnumValueA
RegQueryValueExA
RegOpenKeyA
RegQueryInfoKeyA

ole32

OleRun

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2db47be23a09c3c98d8256fbec60c0a9

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 16KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 100KB - Virtual size: 97KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 100KB - Virtual size: 97KB

.reloc
Size: 4KB - Virtual size: 1KB