75cb531e5a65750e0714876657146ae5cebae9700ae0b4c2cc33491048bde6f2

Sharing

Copy URL Twitter E-mail

General

Target

75cb531e5a65750e0714876657146ae5cebae9700ae0b4c2cc33491048bde6f2
Size

115KB
MD5

c513f59fc4a63df967d0ac8d8df8f7ba
SHA1

e35d585ab2484043f217d43dda651ed24bec19e3
SHA256

75cb531e5a65750e0714876657146ae5cebae9700ae0b4c2cc33491048bde6f2
SHA512

54809d5574425969ce2e441a24df4b40f900e56976cb872955a66ea38d0910bacd2560b0587a468fde91fbc5d164c295951124fc3995c4bcd53ac01eba00eaa9
SSDEEP

1536:YqUCbc/S8CKd7lsQogVzO9D9ElM6mekhTbMscnrKiU2IB5xY7RHjQSfP9:i/S8Plpk2lM6mekhThDiU2m5xuHj5fP9

Score

N/A

Malware Config

Signatures

Files

75cb531e5a65750e0714876657146ae5cebae9700ae0b4c2cc33491048bde6f2
.exe windows x86

b1c05bfc29ee1405e5488b43ca776458

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFile
UnmapViewOfFile
MoveFileExA
GetCurrentProcess
FlushViewOfFile
GetTickCount
SetFileTime
GetWindowsDirectoryA
WriteFile
InitializeCriticalSection
LeaveCriticalSection
GetFileAttributesA
CreateProcessA
GetModuleFileNameW
GetSystemDirectoryA
GetEnvironmentVariableA
FlushFileBuffers
GetShortPathNameA
GetLastError
GetProcAddress
EnterCriticalSection
CreateFileMappingA
GetModuleFileNameA
GetModuleHandleA
GetFileTime
DeleteCriticalSection
CloseHandle
GetTempPathA
DeleteFileA
HeapReAlloc
WriteConsoleW
SetStdHandle
RtlUnwind
LoadLibraryW
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
Sleep
GetFileSize
CreateFileA
ExitProcess
GetConsoleMode
GetConsoleCP
SetFilePointer
CreateFileW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
HeapAlloc
GetProcessHeap
VirtualProtect
GetCommandLineA
HeapSetInformation
GetStartupInfoW
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
RaiseException
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
GetStdHandle
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
HeapCreate

user32

EndPaint
GetMessageA
SetTimer
RegisterClassExA
PostQuitMessage
LoadIconA
BeginPaint
TranslateMessage
SetWindowLongA
CreateWindowExA
DefWindowProcA
ShowWindow
DispatchMessageA
GetSystemMetrics
UpdateWindow
LoadCursorA
MoveWindow
KillTimer

advapi32

RegOpenKeyA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA
SHGetSpecialFolderPathA

shlwapi

PathAppendA
PathAddBackslashA

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b1c05bfc29ee1405e5488b43ca776458

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

shlwapi

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 55KB - Virtual size: 126KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 55KB - Virtual size: 126KB

.rsrc
Size: 2KB - Virtual size: 1KB