a13b90111cf5054e290a42ac307d8fac2113cd5e597f7b9f84051b2d88986218

Sharing

Copy URL

Twitter E-mail

General

Target

a13b90111cf5054e290a42ac307d8fac2113cd5e597f7b9f84051b2d88986218
Size

4.0MB
MD5

ffb8f2b184a583a281e42b7ceeaacbc1
SHA1

848f8cb912fd833a08481f571146022fb73eb80e
SHA256

a13b90111cf5054e290a42ac307d8fac2113cd5e597f7b9f84051b2d88986218
SHA512

5342fae478ccac6d933894905c5b068bd2ac0ac97dad5afb88831b31fd58bc9237388149de0439489a8913224719cb038d5c929fa098581cc7da981fd0a4a79b
SSDEEP

98304:Xoe0/H/vLq+crSY8bBXKJ01peq1cZqD+cngaSHQ3rafb:XhAHLq+cJ8NXKJApeq1c8DJgaBi

Score

N/A

Malware Config

Signatures

Files

a13b90111cf5054e290a42ac307d8fac2113cd5e597f7b9f84051b2d88986218
.exe windows x86

d60a80fc16537113d406daaff7570584

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
GetCurrentDirectoryA
GetShortPathNameA
FindResourceExA
EnumResourceLanguagesA
ResumeThread
WriteProcessMemory
RaiseException
SetFileAttributesA
CreateDirectoryA
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentThreadId
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LocalFree
GetProcAddress
GetModuleFileNameW
InitializeCriticalSection
WideCharToMultiByte
RtlUnwind
GetStringTypeW

user32

DefWindowProcA
SetFocus
AdjustWindowRectEx

advapi32

RegCreateKeyA
RegSetValueA
RegCloseKey

ole32

ReadClassStm
CoRegisterClassObject

oleaut32

SysAllocString

Sections

0
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

4
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

5
Size: 11KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6
Size: 141KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

7
Size: 205B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8
Size: 48KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

10
Size: 7KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

!e
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d60a80fc16537113d406daaff7570584

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

Sections

0 Size: - Virtual size: 40KB

1 Size: 10KB - Virtual size: 12KB

2 Size: - Virtual size: 4KB

3 Size: 52KB - Virtual size: 52KB

4 Size: 3KB - Virtual size: 4KB

5 Size: 11KB - Virtual size: 20KB

6 Size: 141KB - Virtual size: 144KB

7 Size: 205B - Virtual size: 4KB

8 Size: 48KB - Virtual size: 72KB

9 Size: 4KB - Virtual size: 8KB

10 Size: 7KB - Virtual size: 30KB

!e Size: 512B - Virtual size: 512B

0
Size: - Virtual size: 40KB

1
Size: 10KB - Virtual size: 12KB

2
Size: - Virtual size: 4KB

3
Size: 52KB - Virtual size: 52KB

4
Size: 3KB - Virtual size: 4KB

5
Size: 11KB - Virtual size: 20KB

6
Size: 141KB - Virtual size: 144KB

7
Size: 205B - Virtual size: 4KB

8
Size: 48KB - Virtual size: 72KB

9
Size: 4KB - Virtual size: 8KB

10
Size: 7KB - Virtual size: 30KB

!e
Size: 512B - Virtual size: 512B