c64096e9f6ec6b237210cdaa031c6bcfa71b69dec7a62e6888b2ea694ba37313

Sharing

Copy URL Twitter E-mail

General

Target

c64096e9f6ec6b237210cdaa031c6bcfa71b69dec7a62e6888b2ea694ba37313
Size

126KB
MD5

723ab18ebe66d68414f0e577c48b672e
SHA1

3c242f48422b9bf96ddf1236fe5af38bc62a0282
SHA256

c64096e9f6ec6b237210cdaa031c6bcfa71b69dec7a62e6888b2ea694ba37313
SHA512

aa1d18600313ecdd08766a0228cfc0a41afeffe23860b53f83b19fee463c15937ca8569058dd1b9d2270a32dc6f93016d8b55ea5dc7777ca3fada71137af22a9
SSDEEP

1536:tfACPH1tKsUnw9Q1wFTlpopVr2fTYU0t0l5snRl:tokHCNb1ifopVqx0t+S/

Score

N/A

Malware Config

Signatures

Files

c64096e9f6ec6b237210cdaa031c6bcfa71b69dec7a62e6888b2ea694ba37313
.exe windows x86

e71ef5cf811a12e53c0efd60c2750a0a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadStringA
MessageBoxA
ExitWindowsEx
wsprintfA

kernel32

SetEndOfFile
SetFilePointer
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
lstrcatA
GetWindowsDirectoryA
DeleteFileA
MoveFileExA
GetSystemDirectoryA
GetVersion
FindNextFileA
FindFirstFileA
lstrcpyA
HeapAlloc
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteFile
CreateProcessA
WaitForSingleObject
CloseHandle
GetCurrentProcess
GetLastError
GlobalAlloc
LoadLibraryA
GlobalFree
GetSystemDefaultLCID
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
lstrcmpiA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiOpenDevRegKey
SetupDiDeleteDevRegKey
SetupDiRemoveDevice
SetupDiDestroyDeviceInfoList

advapi32

AdjustTokenPrivileges
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
LookupPrivilegeValueA
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
LookupAccountSidA
FreeSid

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ice
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e71ef5cf811a12e53c0efd60c2750a0a

Headers

File Characteristics

Imports

user32

kernel32

setupapi

advapi32

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 16KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 28KB - Virtual size: 24KB

.reloc Size: 4KB - Virtual size: 4KB

.ice Size: 30KB - Virtual size: 30KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 16KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 28KB - Virtual size: 24KB

.reloc
Size: 4KB - Virtual size: 4KB

.ice
Size: 30KB - Virtual size: 30KB