a9db8f2853a1ccd9979439ca6480717625d49fcc61f1486dbb765db3007ff2ac

Sharing

Copy URL Twitter E-mail

General

Target

a9db8f2853a1ccd9979439ca6480717625d49fcc61f1486dbb765db3007ff2ac
Size

158KB
MD5

3fdaa02ba2a346cee194834299a7e570
SHA1

1c7107931d85abefbcbb1c27cc99ca8b52444f2f
SHA256

a9db8f2853a1ccd9979439ca6480717625d49fcc61f1486dbb765db3007ff2ac
SHA512

7abce0814fe0fc83e5ae12dc036ecef46e4428ca15989daec8f70990007c888c7049ae40033a0d817543185ae29531b345f34efe5acc15139ed15fd2e0708ad6
SSDEEP

3072:7wSHfP486gNIJQFnR3s98Oqqdgh9Qsfl2iWx:7l4bJQn3s/bgTQIlLw

Score

N/A

Malware Config

Signatures

Files

a9db8f2853a1ccd9979439ca6480717625d49fcc61f1486dbb765db3007ff2ac
.exe windows x86

4302fda606cb4a9327401596d1050348

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
LockResource
FindResourceA
GetSystemTime
SystemTimeToFileTime
GetFileSize
FindNextFileA
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
WideCharToMultiByte
WriteFile
DebugBreak
GetVersionExA
GetVersionExW
GetCPInfo
SetLastError
lstrlenW
FreeLibrary
LoadLibraryA
GetLocalTime
GetVersion
InterlockedExchange
MultiByteToWideChar
InterlockedCompareExchange
GetSystemTimeAsFileTime
VirtualFreeEx
HeapAlloc
FileTimeToSystemTime
FindFirstFileA
FindClose
CreateDirectoryA
GetProcessHeap
HeapFree
GetExitCodeProcess
GetModuleFileNameA
QueryPerformanceCounter
QueryPerformanceFrequency
LocalFree
WaitForSingleObject
GetModuleHandleA
CreateProcessA
GetCommandLineA
GetExitCodeThread
GetProcAddress
UnhandledExceptionFilter
IsDebuggerPresent
CreateFileA
CloseHandle
ReadFile
GetLastError
VirtualFree
VirtualAlloc
Sleep
MapViewOfFileEx

user32

EnumChildWindows
GetWindowThreadProcessId
EnumWindows
SetWindowTextA

gdi32

SetLayout

advapi32

RegEnumKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegOpenKeyExW

ole32

CoUninitialize
CoInitialize
CoCreateInstance

version

GetFileVersionInfoA
VerQueryValueA

msvcrt

free
localeconv
mbtowc
malloc
_chdir
strchr
qsort
strstr
strncmp
memset
wcsncpy
strrchr
isspace
clock
wcsrchr
wcschr
atoi
rand
tolower
strtoul
strtol
isdigit
printf
fprintf
wcsstr
realloc
sprintf
iswprint

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4302fda606cb4a9327401596d1050348

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

version

msvcrt

Sections

.text Size: 72KB - Virtual size: 70KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 40KB - Virtual size: 2.2MB

.rsrc Size: 20KB - Virtual size: 16KB

.text
Size: 72KB - Virtual size: 70KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 40KB - Virtual size: 2.2MB

.rsrc
Size: 20KB - Virtual size: 16KB