80b35b24933dbafa798195eca9428979f634714869e81c0ba0bdd78a944896f6

Sharing

Copy URL Twitter E-mail

General

Target

80b35b24933dbafa798195eca9428979f634714869e81c0ba0bdd78a944896f6
Size

112KB
MD5

cafae3461b449964fd17b9bf50f5438d
SHA1

42ae43ddfa0c36e3f48e8f2249e3403ba97604af
SHA256

80b35b24933dbafa798195eca9428979f634714869e81c0ba0bdd78a944896f6
SHA512

bb9637a6ecf9b789b698efa6444678314640a9c5bc506d7fe35de18d674ba2efb92e4688287cdaed94a0dd80e4d1667e7c7ae0fa4cebe29035dd3d520d0c3d4a
SSDEEP

3072:JNTzD4OHkZKE+G6DO0nu2SMLR7ZYJo7JlI0:DzD4OHkZz+G6DOAuoF7aMI

Score

N/A

Malware Config

Signatures

Files

80b35b24933dbafa798195eca9428979f634714869e81c0ba0bdd78a944896f6
.exe windows x86

57b14c4b904ae5720f4149ab5ca661f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetVersion
GetModuleHandleA
GetSystemTimeAsFileTime
DeviceIoControl
GetCurrentThreadId
CloseHandle
GetFileSize
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
lstrcmpiA
HeapReAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
LoadResource
LockResource
TlsAlloc
LoadLibraryA
VirtualAlloc
GetStdHandle
GetStringTypeW
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW

user32

DefWindowProcA
BeginPaint
EndPaint
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
GetSystemMetrics
LoadIconA
RegisterClassExA
GetClientRect
EndDialog
MessageBoxA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA

gdi32

GetDeviceCaps

advapi32

RegCloseKey
RegSetValueExW

shell32

StrStrIA

ole32

CoTaskMemAlloc
CoInitialize
CoUninitialize

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

SEGM0
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 7B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

57b14c4b904ae5720f4149ab5ca661f3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 16KB - Virtual size: 12KB

SEGM0 Size: 68KB - Virtual size: 64KB

DATA Size: 4KB - Virtual size: 7B

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 16KB - Virtual size: 12KB

SEGM0
Size: 68KB - Virtual size: 64KB

DATA
Size: 4KB - Virtual size: 7B

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 12KB - Virtual size: 9KB