9d7f79139e9be8cf1a23c2e1539fd9fee2feb0dc3753b315cbac3a613d40da5c

Sharing

Copy URL Twitter E-mail

General

Target

9d7f79139e9be8cf1a23c2e1539fd9fee2feb0dc3753b315cbac3a613d40da5c
Size

51KB
MD5

51f78925b50c4f23a836c812f03fbc6e
SHA1

a940c83bb916fb040d15b3d7c095ee6515529362
SHA256

9d7f79139e9be8cf1a23c2e1539fd9fee2feb0dc3753b315cbac3a613d40da5c
SHA512

aa1516ab587450b02e259a45105d90d1734ff6ba6037c7ede67883996438cd036e42b8e66f3ff187e378cc5acfe4106a27fab5ae20b9d6622b2287f437aae8be
SSDEEP

768:iftfDVdPlIxw4cpOUXyUNY67eoHYUlvsXHs5wap0MuBuIw:mxDVd9IxUObUNpHYUrLUVw

Score

N/A

Malware Config

Signatures

Files

9d7f79139e9be8cf1a23c2e1539fd9fee2feb0dc3753b315cbac3a613d40da5c
.exe windows x86

f219c553137648c18bc33689d81ea861

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
GetFullPathNameA
CloseHandle
GetModuleHandleA
DeleteFileA
QueryDosDeviceA
FindNextFileA
GetLogicalDrives
WaitForSingleObject
DeviceIoControl
ResetEvent
OutputDebugStringA
FlushFileBuffers
FindFirstFileA
GetSystemTime
IsBadCodePtr
GetTimeZoneInformation
VirtualAlloc
GetFileTime
RtlUnwind
UnhandledExceptionFilter
LeaveCriticalSection
GetFileSize
WriteFile
GetCurrentThreadId
SystemTimeToFileTime
DeleteCriticalSection
SetUnhandledExceptionFilter
FileTimeToSystemTime
ReadFile
DuplicateHandle
CreateThread
CreateFileA
CreateEventA
FindClose
FreeLibrary
GetSystemTimeAsFileTime
VirtualFree
EnterCriticalSection
SetFilePointer

user32

GetProcessWindowStation
GetUserObjectInformationA
MessageBoxA

msvcrt

memset
_errno
malloc
fprintf
__CxxFrameHandler
rand
sprintf
fclose
free
_splitpath
wcsncpy
localtime
wcsstr
strstr
_amsg_exit
ctime
swprintf
fflush
strncpy
calloc
_purecall
fopen
_wcsicmp
_strupr
ftell
_XcptFilter
strncmp
fseek
memmove
printf
time
_stricmp
fread
srand
_snprintf
memcpy
_initterm
vsprintf
_CxxThrowException
toupper

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

ole32

CoInitialize
CoUninitialize

iphlpapi

GetTcpTable
GetUdpTable
InternalGetIfTable
IcmpCreateFile
UnenableRouter
DeleteIpNetEntry
GetTcpStatistics
GetRTTAndHopCount

kbdhe

KbdLayerDescriptor

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 300KB - Virtual size: 659KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f219c553137648c18bc33689d81ea861

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

advapi32

ole32

iphlpapi

kbdhe

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 300KB - Virtual size: 659KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 300KB - Virtual size: 659KB

.rsrc
Size: 512B - Virtual size: 4KB