b57721f8eb8bea92879195924a959612a606e376ed73857026a96a64d7347efa

Sharing

Copy URL Twitter E-mail

General

Target

b57721f8eb8bea92879195924a959612a606e376ed73857026a96a64d7347efa
Size

160KB
MD5

c5cf3fac2b271a61ae0bd1ade44551fa
SHA1

ef1ba924cfe144b94dec0148fddea576253dff1d
SHA256

b57721f8eb8bea92879195924a959612a606e376ed73857026a96a64d7347efa
SHA512

e0551e422b753049eebd2511e6f8748edd810fcbe79e6a35753faf35174bf7d288f509b5fca3fb09148f620b359ab287543f00583f5784b1815c9e3c2ac8c55b
SSDEEP

3072:Vte3x4ZEwA6awe7jJu9jJP8wuHnOPl9W+AI1m:dr3YCHlI+A6m

Score

N/A

Malware Config

Signatures

Files

b57721f8eb8bea92879195924a959612a606e376ed73857026a96a64d7347efa
.exe windows x86

fdfcc21274016830f875d04c8cf7f3f6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

sfcdll

_SfcDll_DeleteFileData@8
_FileType_Restore@8
_VDF_Close@8
_VDF_LoadFiles@0
_Folder_GetFlags@8
_FileType_Add@8
_FileType_Link@8
_VDF_LoadFoldersTypesCabs@0
_Folder_SetFlags@8
_VDF_Open@8
_File_AddHere@40
_Folder_Remove@8
_FileType_Remove@8
_File_GetType@8
_Folder_Add@12
_File_GetNext@16
_FileType_GetFlags@8
_File_Updated@4
_File_Remove@4
_FileType_LookUp@12
_LDID_GetPath@12
_SfcDll_UpdateFileData@36
_File_UpdateInfo@32
_CAB_GetName@12
_Folder_GetNext@20
_File_LookUp@16
_Folder_GetName@12
_FileType_GetFolder@8
_FileType_GetNext@20

kernel32

GetFileType
GetTimeFormatA
VirtualAlloc
GetDateFormatA
HeapFree
VirtualFree
HeapAlloc
HeapDestroy
GetStdHandle
HeapCreate
GetCommandLineA
GetVersion
GetStartupInfoA
WideCharToMultiByte
GetStringTypeW
GetStringTypeA
TerminateProcess
GetCurrentProcess
SetCurrentDirectoryA
GetCurrentDirectoryA
_lclose
LocalFree
_lread
LocalAlloc
GetFileSize
_lopen
lstrcpynA
lstrlenA
FileTimeToLocalFileTime
FindClose
FindFirstFileA
lstrcpyA
DeleteFileA
lstrcmpiA
GetLastError
CopyFileA
MultiByteToWideChar
MoveFileA
GetTempFileNameA
FindNextFileA
SetFileAttributesA
CloseHandle
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
WriteFile
SetFilePointer
GetTempPathA
ReadFile
SetLastError
lstrcmpA
FileTimeToDosDateTime
lstrcatA
MoveFileExA
ExitProcess
FileTimeToSystemTime
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
GetWindowsDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
FormatMessageA
GetModuleHandleA
GetLocalTime
IsDBCSLeadByte
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetShortPathNameA
GetEnvironmentStringsW
GetDriveTypeA
RemoveDirectoryA
CreateDirectoryA
DeviceIoControl
GetSystemDirectoryA
GetACP
GetCPInfo
FreeEnvironmentStringsA
SetHandleCount
FreeEnvironmentStringsW
GetEnvironmentStrings
RtlUnwind
GetModuleFileNameA
GetOEMCP
UnhandledExceptionFilter

user32

GetSystemMenu
PeekMessageA
MessageBoxA
DeleteMenu
AppendMenuA
DestroyWindow
EnableWindow
PostQuitMessage
DefDlgProcA
LoadImageA
RegisterClassExA
CreateDialogParamA
PostMessageA
GetMessageA
TranslateMessage
GetWindowLongA
GetClientRect
DispatchMessageA
WinHelpA
LoadIconA
KillTimer
SetTimer
IsDlgButtonChecked
IsDialogMessageA
CheckDlgButton
ExitWindowsEx
GetSystemMetrics
CharPrevA
FindWindowA
IsIconic
BringWindowToTop
GetLastActivePopup
ShowWindow
SetForegroundWindow
LoadCursorA
SetCursor
wsprintfA
CheckRadioButton
SetFocus
MessageBeep
SetWindowTextA
EndDialog
DialogBoxParamA
GetWindowTextLengthA
GetWindowTextA
SetWindowLongA
GetParent
SendMessageA
CharNextA
GetActiveWindow
GetDlgItem
LoadStringA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegEnumValueA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

ShellAboutA
SHGetDesktopFolder
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA

comctl32

PropertySheetA
ord17

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fdfcc21274016830f875d04c8cf7f3f6

Headers

File Characteristics

Imports

sfcdll

kernel32

user32

comdlg32

advapi32

shell32

comctl32

version

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 6KB

.idata Size: 8KB - Virtual size: 5KB

.rsrc Size: 48KB - Virtual size: 48KB

.reloc Size: 40KB - Virtual size: 50KB

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 6KB

.idata
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 48KB - Virtual size: 48KB

.reloc
Size: 40KB - Virtual size: 50KB