91b9390f6855b9f44906542291cbdd3b0db0d33ccbe92cbd42b8c81170b9de27

Sharing

Copy URL Twitter E-mail

General

Target

91b9390f6855b9f44906542291cbdd3b0db0d33ccbe92cbd42b8c81170b9de27
Size

182KB
MD5

ff4e1ea763d6ff5ea14b421a158de1d6
SHA1

599af586327ade99ec5eeda940164c9ddcd6b963
SHA256

91b9390f6855b9f44906542291cbdd3b0db0d33ccbe92cbd42b8c81170b9de27
SHA512

814e728ba766d1743089326f0715f88f85943cec8bfd65b52dff9404dfe880d1a53b0aaa597d4e15248b36c9ca26e9e3a979009d6aebe27534c14d29b249c914
SSDEEP

3072:O+RJBVWP75eusnu4JuiH9qsn9pKZLR/M4U9bVmFBYySf/45IQRRoMwMUe3:OYJ3WtrgJuismqLRU4okFtSi3sM9

Score

N/A

Malware Config

Signatures

Files

91b9390f6855b9f44906542291cbdd3b0db0d33ccbe92cbd42b8c81170b9de27
.exe windows x86

b5a08533d8511d7a8ec9b5d15b58e5ba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharUpperA
MessageBoxA

shell32

ShellExecuteA

shfolder

SHGetFolderPathA

shlwapi

PathFileExistsA

advapi32

ConvertSidToStringSidW
CryptAcquireContextA
CryptCreateHash
CryptGetHashParam
CryptHashData
LookupAccountNameW
RegCloseKey
RegCreateKeyExA

kernel32

CloseHandle
CopyFileA
CreateEventA
CreateFileA
DeviceIoControl
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FlushFileBuffers
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetComputerNameW
GetConsoleMode
GetCurrentThreadId
GetEnvironmentStringsA
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetSystemDirectoryW
GetTimeZoneInformation
GetVersion
GetVolumeInformationW
GlobalAlloc
LoadLibraryA
LoadResource
LocalFree
LockResource
MultiByteToWideChar
OpenProcess
ReadConsoleInputA
ReadFile
SetConsoleCtrlHandler
SetConsoleMode
SetEnvironmentVariableA
SetEnvironmentVariableW
SetFileAttributesA
SetFilePointer
SetStdHandle
SetThreadLocale
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteConsoleA
WriteFile
WritePrivateProfileStringA

msvcrt

_chdir

psapi

EnumProcessModules
EnumProcesses
GetModuleBaseNameA
GetModuleFileNameExA

Sections

AUTO
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 9KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 104KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b5a08533d8511d7a8ec9b5d15b58e5ba

Headers

File Characteristics

Imports

user32

shell32

shfolder

shlwapi

advapi32

kernel32

msvcrt

psapi

Sections

AUTO Size: 62KB - Virtual size: 62KB

.idata Size: 2KB - Virtual size: 2KB

DGROUP Size: 9KB - Virtual size: 271KB

.reloc Size: 3KB - Virtual size:

.rsrc Size: 104KB - Virtual size:

AUTO
Size: 62KB - Virtual size: 62KB

.idata
Size: 2KB - Virtual size: 2KB

DGROUP
Size: 9KB - Virtual size: 271KB

.reloc
Size: 3KB - Virtual size:

.rsrc
Size: 104KB - Virtual size: