bf20d378a7cfd68198303c3dc3305a01e791cc2f7b205eed8f23d5f165eaf880

Sharing

Copy URL Twitter E-mail

General

Target

bf20d378a7cfd68198303c3dc3305a01e791cc2f7b205eed8f23d5f165eaf880
Size

311KB
MD5

1caa02308c703a78bda81438b9ce2304
SHA1

3808a7eaa52d10190953caaddde88bd05da9df54
SHA256

bf20d378a7cfd68198303c3dc3305a01e791cc2f7b205eed8f23d5f165eaf880
SHA512

3c97434f577b63fa1cb24b52b5f62cf86f03ddda86c09194a4c7cac09cd6b5f8bdc030080eb0971daaf183a92c0b17a4af3eed680d32ca32d90cb73bfb3b93e1
SSDEEP

6144:9hTJty6dhT+JjrEb7AH6vnJYB3bvCy+FO:HVD8I8CJYBGy0O

Score

N/A

Malware Config

Signatures

Files

bf20d378a7cfd68198303c3dc3305a01e791cc2f7b205eed8f23d5f165eaf880
.exe windows x86

7dcb3d6cb1c242db7dda0755dcf48fca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
CreateThread
SetFileAttributesA
lstrcmpA
lstrcpyA
lstrlenA
GetProcAddress
LoadLibraryA
Sleep
WriteFile
DeleteFileA
CloseHandle
CreateFileA
ReadFile
GetFileSize
FreeLibrary
GetModuleHandleA
CreatePipe
lstrcmpiA
GetVersionExA
GetLastError
CreateProcessA
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
TerminateProcess
OutputDebugStringA
WaitForSingleObject
PeekNamedPipe
SetFilePointer
CopyFileA
LocalFree
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
GetOEMCP
GetACP
ExitProcess
FindFirstFileA
GetModuleFileNameA
FindClose
MultiByteToWideChar
RaiseException
GetCPInfo
IsBadCodePtr
HeapFree
RtlUnwind
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr

user32

CreateWindowExA
ShowWindow
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
LoadIconA
wsprintfA
DefWindowProcA
PostQuitMessage
UpdateWindow

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
GetUserNameA

ole32

CoInitialize
CoCreateInstance

oleaut32

GetErrorInfo

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 184KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7dcb3d6cb1c242db7dda0755dcf48fca

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

Sections

.text Size: 52KB - Virtual size: 52KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 184KB - Virtual size: 192KB

.rsrc Size: 32KB - Virtual size: 32KB

.aspack Size: 34KB - Virtual size: 36KB

.adata Size: - Virtual size: 4KB

.text
Size: 52KB - Virtual size: 52KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 184KB - Virtual size: 192KB

.rsrc
Size: 32KB - Virtual size: 32KB

.aspack
Size: 34KB - Virtual size: 36KB

.adata
Size: - Virtual size: 4KB