fa9a25aabc6f04f477733304101bc5c0fb9f52a4f873f4152bb62611e01ef497

Sharing

Copy URL

Twitter E-mail

General

Target

fa9a25aabc6f04f477733304101bc5c0fb9f52a4f873f4152bb62611e01ef497
Size

403KB
MD5

488b894db215a769112d6137122fa7b3
SHA1

a0457680f5dd5341bd58b2579456ce4b1249ede7
SHA256

fa9a25aabc6f04f477733304101bc5c0fb9f52a4f873f4152bb62611e01ef497
SHA512

dd6f13fafd6434944181faa0fe778d8208d3cf62e5c2073ee6c5c96fade1d3c17e75e5a9aaa937c546d1aa704c5a70a3e7773e2c4f8bdfa3ed2137c64f4cf9a5
SSDEEP

6144:rPEwiS2+fdX1yrNM9I5QpO64tpan0sxK0fEKIypQV5lr3:zXBpO6GCOXRwfTqVz

Score

N/A

Malware Config

Signatures

Files

fa9a25aabc6f04f477733304101bc5c0fb9f52a4f873f4152bb62611e01ef497
.exe windows x86

9b33219df55752d0ede2e378de5c9444

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
LoadLibraryA
GetEnvironmentStrings
GetCurrentThread
HeapSize
HeapAlloc
GetProcessHeap
ExitProcess
CompareStringW
LocalFree
FormatMessageW
GetProcAddress
InterlockedDecrement
lstrlenW
GetVersionExW
ResetEvent
LocalAlloc
MultiByteToWideChar
GetExitCodeProcess
CreateEventA
HeapDestroy
CreateThread
VirtualAlloc
GetEnvironmentStringsW
FileTimeToSystemTime
GetCurrentProcessId
CompareStringA
GetTimeZoneInformation
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCommandLineA
HeapFree
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
Sleep
HeapReAlloc
RtlUnwind
GetLocaleInfoA
GetLocaleInfoW
SetEnvironmentVariableA

advapi32

RegDeleteKeyW
RegEnumKeyExW
RegDeleteKeyA

ole32

CoTaskMemAlloc
CLSIDFromProgID
OleInitialize
OleRun
CoDisconnectObject
CoGetClassObject
CoInitialize
CoUninitialize
OleFlushClipboard

setupapi

SetupDecompressOrCopyFileA

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 314KB - Virtual size: 317KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b33219df55752d0ede2e378de5c9444

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

ole32

setupapi

Sections

.text Size: 83KB - Virtual size: 83KB

.data Size: 314KB - Virtual size: 317KB

.rdata Size: 4KB - Virtual size: 4KB

.text
Size: 83KB - Virtual size: 83KB

.data
Size: 314KB - Virtual size: 317KB

.rdata
Size: 4KB - Virtual size: 4KB