81a536a7aa14e133648c922457ee1155ca61194131a59a8412975dc0e03bb086

Sharing

Copy URL Twitter E-mail

General

Target

81a536a7aa14e133648c922457ee1155ca61194131a59a8412975dc0e03bb086
Size

260KB
MD5

cba5cab1d6d6930b11cdfc11fbfd7644
SHA1

a20c65c57f9c45b7aae508fa9f7cd85b6dbc067f
SHA256

81a536a7aa14e133648c922457ee1155ca61194131a59a8412975dc0e03bb086
SHA512

defa4cc04e688140938f98edfd3be6d4afff4bf193403b4f16e92c93a40626e5ade0daf743c4a10142e2e0fc5ab8614fa44e1a10dd040c346ba3900254ec7bf3
SSDEEP

6144:Wf9cZAwSI4YaZ7CQSdsTslieEBWb5DnaSWeikP0:c7Yasdsgo/kRWOP0

Score

N/A

Malware Config

Signatures

Files

81a536a7aa14e133648c922457ee1155ca61194131a59a8412975dc0e03bb086
.exe windows x86

f6e3b746898d35fe366faab8d25ac527

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord1576
ord2827
ord815
ord825
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord1168
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord6877
ord6778
ord860
ord858
ord2818
ord939
ord537
ord2614
ord940
ord6283
ord6282
ord941
ord540
ord2915
ord5572
ord4202
ord535
ord2764
ord800

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
__dllonexit
__CxxFrameHandler
_setmbcp
exit
_iob
fprintf
malloc
realloc
free
_adjust_fdiv

kernel32

CreateFileA
GetFileSize
ReadFile
CloseHandle
WriteFile
WideCharToMultiByte
SizeofResource
FindResourceA
SetFilePointer
DeleteFileA
GetEnvironmentVariableA
CreateDirectoryA
GetTempPathA
GetTempFileNameA
Sleep
CopyFileA
CreateProcessA
lstrlenA
GetStartupInfoA
GetModuleHandleA
GetLastError
GetCurrentProcessId
GetModuleFileNameA
LoadResource

user32

GetForegroundWindow
ShowWindow

advapi32

RegEnumValueA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA

shell32

ShellExecuteA

ole32

CoCreateGuid
CoInitialize
StringFromGUID2

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 220KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f6e3b746898d35fe366faab8d25ac527

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

advapi32

shell32

ole32

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 220KB - Virtual size: 218KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 220KB - Virtual size: 218KB