42e5ed84768b236120e396762adf6fb07614354d7ce2b18bd21495c715d638f7

Sharing

Copy URL Twitter E-mail

General

Target

42e5ed84768b236120e396762adf6fb07614354d7ce2b18bd21495c715d638f7
Size

388KB
MD5

2490519224b1a4a6533cc89b4dfb7bff
SHA1

e1ad9250e1887100b9eb0a0ffe66084280e5e1b0
SHA256

42e5ed84768b236120e396762adf6fb07614354d7ce2b18bd21495c715d638f7
SHA512

3ef168bcbd9a8ef1679b7ce4cea2010542da1dfbc09b3a4bef9959ff7f8fedab31f040fe3a8e33c88ed13e86f863b07e7ad226e62c416d6de1dadb33399f23d6
SSDEEP

6144:7OOOiUz/Lg4Gi51igyPp/fxi2IDyyLi407F/3237vvTWjaiR7:ez/Lb51i3PpAlDy4uF/3cTWO

Score

N/A

Malware Config

Signatures

Files

42e5ed84768b236120e396762adf6fb07614354d7ce2b18bd21495c715d638f7
.exe windows x86

520f7c266885c4a71f0bb303edf69343

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindFirstFileW
FindNextFileW
FormatMessageW
FreeLibrary
FreeLibraryAndExitThread
GetCurrentProcessId
GetDateFormatW
GetFileAttributesW
GetFileSize
GetLastError
GetLocalTime
GetModuleFileNameW
GetStartupInfoW
GetSystemTimeAsFileTime
GetTempFileNameW
GetTempPathW
GetTickCount
GetWindowsDirectoryW
GlobalAlloc
GlobalLock
GlobalUnlock
DuplicateHandle
InterlockedDecrement
ExitThread
LeaveCriticalSection
LoadLibraryW
LocalAlloc
LocalFileTimeToFileTime
LocalFree
MoveFileW
MulDiv
MultiByteToWideChar
ReleaseMutex
ResetEvent
SetEvent
SetFileTime
SystemTimeToFileTime
UnmapViewOfFile
WaitForSingleObject
WriteFile
lstrcmpW
lstrcpyW
lstrcpynW
lstrlenW
DeleteFileW
DeleteCriticalSection
CreateThread
CreateMutexW
InterlockedIncrement
EnterCriticalSection
CreateEventW
CreateDirectoryW
CopyFileW
CompareStringW
CloseHandle
CreateFileW
GetCurrentThread
GetCurrentProcess
InitializeCriticalSection
VirtualAlloc

user32

LoadIconW
LoadCursorA
LoadIconA

gdi32

GetStockObject

advapi32

RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
OpenSCManagerW
CloseServiceHandle
RegOpenKeyExA
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegEnumValueW

msvcrt

memcpy
_XcptFilter
__RTDynamicCast
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_vsnwprintf
_wcmdln
exit
free
malloc
realloc
wcscpy
wcsncpy
wcstol

Sections

.text
Size: 239KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ag
Size: 512B - Virtual size: 22B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

520f7c266885c4a71f0bb303edf69343

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

Sections

.text Size: 239KB - Virtual size: 238KB

.ag Size: 512B - Virtual size: 22B

.rdata Size: 100KB - Virtual size: 100KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 45KB - Virtual size: 44KB

.text
Size: 239KB - Virtual size: 238KB

.ag
Size: 512B - Virtual size: 22B

.rdata
Size: 100KB - Virtual size: 100KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 45KB - Virtual size: 44KB