2f7cbaacf1abfa89a85b62f61710e23c9260c287935a9237254a1fd7b77fff91

Sharing

Copy URL

Twitter E-mail

General

Target

2f7cbaacf1abfa89a85b62f61710e23c9260c287935a9237254a1fd7b77fff91
Size

97KB
MD5

b0254639b2067499a3e76ec51cc5bd83
SHA1

876b944ef465af2b091aa18f49e1c3a6359079cc
SHA256

2f7cbaacf1abfa89a85b62f61710e23c9260c287935a9237254a1fd7b77fff91
SHA512

24dcb6d52ef1644e842dfa9ee80b883bbc60dbb0bf9c895442e0efe1b90d1f287d7eb00370d9712fbff26898b3a5c662d5b994fedc7864bb69438ed345f1469e
SSDEEP

1536:zEjU7N5DIhDvb38/fIaDfQyrMHdJnlFNGnl6P7d8m/2f:QjU7N5DI9vUIaDfvMHdJslEd8m/

Score

N/A

Malware Config

Signatures

Files

2f7cbaacf1abfa89a85b62f61710e23c9260c287935a9237254a1fd7b77fff91
.exe windows x86

df211d51542c31d977ffccab1aaac34c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyExW
RegSetValueExW

kernel32

GetTickCount
SetLastError
GlobalUnlock
IsValidCodePage
InitializeCriticalSection
GetComputerNameW
CloseHandle
RemoveDirectoryW
GetModuleHandleA
LocalFree
InterlockedDecrement
GetDateFormatW
GlobalFree
WideCharToMultiByte
GetACP
InterlockedIncrement
GetProcessId
GetModuleFileNameW
GetCurrentProcess
GlobalLock
GetSystemWindowsDirectoryW
IsBadReadPtr
lstrcmpiW
LocalReAlloc
QueryPerformanceCounter
OutputDebugStringA
lstrlenW
CreateFileW
OutputDebugStringW
DeleteCriticalSection
LoadLibraryW
lstrcpyW
GetEnvironmentStringsW
GlobalAlloc
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
GetEnvironmentStringsA
SetUnhandledExceptionFilter
GetLastError
FormatMessageW
GetStartupInfoA
FileTimeToSystemTime

certcli

CAGetCertTypeExtensions
CACreateCertType
CAGetCertTypePropertyEx
CAUpdateCA
CAFindCertTypeByName
CAEnumCertTypesForCA
CASetCertTypeFlags
CARemoveCACertificateType
CASetCertTypeProperty
CACertTypeSetSecurity
CAGetCAProperty
CAGetCertTypeKeySpec
CASetCertTypeKeySpec
CAFreeCertTypeProperty
CACloseCertType
CAFindByName
CAFreeCAProperty
CAGetCertTypeProperty
CACloseCA
CAGetCertTypeFlags
CAUpdateCertType
CASetCertTypeExtension
CAFreeCertTypeExtensions
CAAddCACertificateType
CAEnumNextCertType
CAEnumCertTypes
CACertTypeGetSecurity

msvcrt

??3@YAXPAX@Z
memmove
wcscmp
malloc
wcstoul
mbstowcs
vswprintf
wcsrchr
_wcsicmp
??2@YAPAXI@Z
??1type_info@@UAE@XZ
wcscat
wcslen
_wcsupr
_purecall
_initterm
?terminate@@YAXXZ
__dllonexit
wcsstr
free
wcscpy
_adjust_fdiv
__RTDynamicCast
_except_handler3
_onexit
wcschr

user32

wsprintfW
SetFocus
SendMessageW
SystemParametersInfoW
LoadCursorW
InsertMenuItemW
SendDlgItemMessageW
EnableWindow
DialogBoxParamW
SetCursor
LoadBitmapW
MessageBoxW
GetWindowLongW
EndDialog
LoadIconW
SetWindowLongW
GetDlgItem
RegisterClipboardFormatW
ReleaseDC
WinHelpW
LoadStringW
GetDlgItemTextA
GetDC
SetWindowTextW
GetParent
LoadImageW
PostMessageW
SetDlgItemTextW

gdi32

DeleteObject
GetDeviceCaps
CreateFontIndirectW

comctl32

CreatePropertySheetPageW
PropertySheetW

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

df211d51542c31d977ffccab1aaac34c

Headers

File Characteristics

Imports

advapi32

kernel32

certcli

msvcrt

user32

gdi32

comctl32

Sections

.text Size: 43KB - Virtual size: 43KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 93KB

.rsrc Size: 23KB - Virtual size: 22KB

.text
Size: 43KB - Virtual size: 43KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 93KB

.rsrc
Size: 23KB - Virtual size: 22KB