fab83c9b0e61ca7b51630865e5d0e7fe2894ec1ac54b389faa2764827d1b583f

Sharing

Copy URL

Twitter E-mail

General

Target

fab83c9b0e61ca7b51630865e5d0e7fe2894ec1ac54b389faa2764827d1b583f
Size

544KB
MD5

33e27cb8447a4dad7cae72dafc6431a0
SHA1

a27694105bbe11560d68dedb3f0271de4abb4ca8
SHA256

fab83c9b0e61ca7b51630865e5d0e7fe2894ec1ac54b389faa2764827d1b583f
SHA512

a7f2bb9ee90b3eff61f28cb5e03d050f9274f0990982e7bdfefe42ada782d199faef72f2a592e7567a708078e49945dc386ca38559793f0cbeb213655be6f479
SSDEEP

12288:zC3o1wOZH7w1C2WBZkegXb7IZTMTlpMURI1RzBKTq:KGwEH7H2WBXQMURI1jKm

Score

N/A

Malware Config

Signatures

Files

fab83c9b0e61ca7b51630865e5d0e7fe2894ec1ac54b389faa2764827d1b583f
.exe windows x86

4bc537de466abe12eb6ed7f9bf4ecbd3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointerEx
WriteFile
FindClose
FindFirstFileW
FreeLibrary
GetProcAddress
LoadLibraryW
InterlockedDecrement
InterlockedIncrement
GetCurrentProcess
GetVolumeInformationW
CreateThread
GetFileAttributesW
GetFullPathNameW
SetVolumeMountPointW
GetVolumeNameForVolumeMountPointW
DefineDosDeviceW
GetLogicalDrives
Sleep
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
SetFileTime
GetFileSize
GetFileTime
SetFileAttributesW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
DeleteFileW
ReadFile
CopyFileW
LoadResource
LockResource
FindResourceW
SetStdHandle
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
FlushFileBuffers
GetEnvironmentStrings
FreeEnvironmentStringsW
GetTickCount
GetVersionExW
CreateFileW
GetLastError
DeviceIoControl
CloseHandle
GetLogicalDriveStringsW
GetDriveTypeW
FormatMessageW
LocalFree
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
GetTempPathW
OutputDebugStringW
RtlUnwind
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy

user32

PostMessageW
EndDialog
MoveWindow
GetWindowTextW
SetWindowTextW
EnableWindow
GetWindowRect
SystemParametersInfoW
SetFocus
GetSystemMenu
AppendMenuW
GetDlgItem
SendMessageW
LoadStringW
MessageBoxW
FindWindowW
SetForegroundWindow
DialogBoxParamW

advapi32

EqualSid
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
RegCloseKey
FreeSid
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc

ole32

CoInitializeEx
CoUninitialize

comctl32

InitCommonControlsEx

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SharedD
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 348KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4bc537de466abe12eb6ed7f9bf4ecbd3

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

comctl32

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 20KB - Virtual size: 28KB

.SharedD Size: 4KB - Virtual size: 4B

.rsrc Size: 348KB - Virtual size: 347KB

.text Size: 112KB - Virtual size: 112KB

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 20KB - Virtual size: 28KB

.SharedD
Size: 4KB - Virtual size: 4B

.rsrc
Size: 348KB - Virtual size: 347KB

.text
Size: 112KB - Virtual size: 112KB