a078d7a1acaae7d9980fcc8cc50732f7e5adfb365e4c919bf5e7ee6a96b92638

Sharing

Copy URL Twitter E-mail

General

Target

a078d7a1acaae7d9980fcc8cc50732f7e5adfb365e4c919bf5e7ee6a96b92638
Size

192KB
MD5

c354feca11ca549c4b342fed4cac9935
SHA1

67ea87671716a51b180467737a640589f17ba6f2
SHA256

a078d7a1acaae7d9980fcc8cc50732f7e5adfb365e4c919bf5e7ee6a96b92638
SHA512

dda6874716f3c64a013c7836b44b4a7ca1ff61ccbf5d938f65f668d9a271b45fab6956ad37c5269c336a0cdb50020dcd2184285e2805b0348715da9659fc0c9a
SSDEEP

3072:fsfhaVFVuJjGjPFb8ROKbkdy2h310SEllDL5uYMWYTSvM/bBclnKIBT:fsZaVFVcGsEh3PIlD5dE92KIB

Score

N/A

Malware Config

Signatures

Files

a078d7a1acaae7d9980fcc8cc50732f7e5adfb365e4c919bf5e7ee6a96b92638
.exe windows x86

4bc574b7626d45f1bf4b449300824b31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
Sleep
GetProcAddress
GetModuleHandleA
HeapAlloc
GetProcessHeap
GetLastError
lstrcatA
ExitProcess
CreateDirectoryA
SetEnvironmentVariableA
lstrlenA
lstrcpyA
GetWindowsDirectoryA
GetTempPathA
GetCurrentDirectoryA
MoveFileA
CloseHandle
SetFileTime
GetFileTime
WriteFile
CreateFileA
FindNextFileA
FindFirstFileA
GetTickCount
GetSystemDirectoryA
lstrcmpiA
GetModuleFileNameA
WaitForSingleObject
CreateEventA
GetFileAttributesA
GetShortPathNameA
ExpandEnvironmentStringsA
OpenEventA
SetUnhandledExceptionFilter
GetCommandLineA
WideCharToMultiByte
MultiByteToWideChar
DeleteFileA
SetFileAttributesA
Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
FreeLibrary
GetStartupInfoA
LocalAlloc
InterlockedExchange
RaiseException
LoadLibraryA

shlwapi

wnsprintfA
SHDeleteKeyA

msvcrt

strchr
strcpy
strlen
rand
srand
_ftol
??2@YAPAXI@Z
memcpy
??3@YAXPAX@Z
strcmp
__CxxFrameHandler
_CxxThrowException
strncpy
strstr
free
malloc
toupper
tolower
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strncat
strcat
_except_handler3
memset
_strnicmp
_stricmp
_strlwr
_itoa

version

GetFileVersionInfoA
GetFileVersionInfoSizeA

user32

wsprintfA
CharNextA

sfc

SfcIsFileProtected

netapi32

NetUserGetLocalGroups

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4bc574b7626d45f1bf4b449300824b31

Headers

File Characteristics

Imports

kernel32

shlwapi

msvcrt

version

user32

sfc

netapi32

Sections

.text Size: 16KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 164KB - Virtual size: 165KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 16KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 164KB - Virtual size: 165KB

.rsrc
Size: 4KB - Virtual size: 3KB