8e886b1c1ab7010b7a7d731d6e63199ab93991333de93b8666fbb80f3c585fab

Sharing

Copy URL Twitter E-mail

General

Target

8e886b1c1ab7010b7a7d731d6e63199ab93991333de93b8666fbb80f3c585fab
Size

158KB
MD5

5bea3f9f3c00b6cd4d54ecac43412170
SHA1

c3f51c8b2bb38ec09f6da18c2b6c983cba84ac75
SHA256

8e886b1c1ab7010b7a7d731d6e63199ab93991333de93b8666fbb80f3c585fab
SHA512

8e944042697d8b4801f577d8791170c493e35d071c02ef7d214869c80c67d80f0f95d16fc5e8faccc7c3f84dd82c0bf181c69a860e3f80009721cc184879914e
SSDEEP

3072:rwSHfP486giR3s9AOXqdgh9Q1W53l2iWY:rl4j3s/sgTQA53lLl

Score

N/A

Malware Config

Signatures

Files

8e886b1c1ab7010b7a7d731d6e63199ab93991333de93b8666fbb80f3c585fab
.exe windows x86

4302fda606cb4a9327401596d1050348

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
LockResource
FindResourceA
GetSystemTime
SystemTimeToFileTime
GetFileSize
FindNextFileA
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
WideCharToMultiByte
WriteFile
DebugBreak
GetVersionExA
GetVersionExW
GetCPInfo
SetLastError
lstrlenW
FreeLibrary
LoadLibraryA
GetLocalTime
GetVersion
InterlockedExchange
MultiByteToWideChar
InterlockedCompareExchange
GetSystemTimeAsFileTime
VirtualFreeEx
HeapAlloc
FileTimeToSystemTime
FindFirstFileA
FindClose
CreateDirectoryA
GetProcessHeap
HeapFree
GetExitCodeProcess
GetModuleFileNameA
QueryPerformanceCounter
QueryPerformanceFrequency
LocalFree
WaitForSingleObject
GetModuleHandleA
CreateProcessA
GetCommandLineA
GetExitCodeThread
GetProcAddress
UnhandledExceptionFilter
IsDebuggerPresent
CreateFileA
CloseHandle
ReadFile
GetLastError
VirtualFree
VirtualAlloc
Sleep
MapViewOfFileEx

user32

EnumChildWindows
GetWindowThreadProcessId
EnumWindows
SetWindowTextA

gdi32

SetLayout

advapi32

RegEnumKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegOpenKeyExW

ole32

CoUninitialize
CoInitialize
CoCreateInstance

version

GetFileVersionInfoA
VerQueryValueA

msvcrt

free
localeconv
mbtowc
malloc
_chdir
strchr
qsort
strstr
strncmp
memset
wcsncpy
strrchr
isspace
clock
wcsrchr
wcschr
atoi
rand
tolower
strtoul
strtol
isdigit
printf
fprintf
wcsstr
realloc
sprintf
iswprint

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4302fda606cb4a9327401596d1050348

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

version

msvcrt

Sections

.text Size: 72KB - Virtual size: 70KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 40KB - Virtual size: 2.2MB

.rsrc Size: 20KB - Virtual size: 16KB

.text
Size: 72KB - Virtual size: 70KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 40KB - Virtual size: 2.2MB

.rsrc
Size: 20KB - Virtual size: 16KB