5a04a57825fda2639eed5780082b3047ed6827cae13f23507ed45367d0e6cfe2

Sharing

Copy URL Twitter E-mail

General

Target

5a04a57825fda2639eed5780082b3047ed6827cae13f23507ed45367d0e6cfe2
Size

609KB
MD5

7e594d922d0f414c6154fb1c297fe02a
SHA1

6b948002b3eccaaea904a84d3980d302ab7de811
SHA256

5a04a57825fda2639eed5780082b3047ed6827cae13f23507ed45367d0e6cfe2
SHA512

20c94383b6994e4fdcb5072f8f8ee807eeb157d6579ac099617b357a77da7087320c1a1eb1065126496c1348d1bf5eb5a01adac047846cd85acfc82ea00872ce
SSDEEP

12288:zD8+ItFkuAhDucvGtdS2rSj/ur00axKK3B3XfdKZ2oPbFJVzrJ1cO:zo+ItmDH+tdSgi/40FcKRlKZHhd1cO

Score

N/A

Malware Config

Signatures

Files

5a04a57825fda2639eed5780082b3047ed6827cae13f23507ed45367d0e6cfe2
.exe windows x86

d60a80fc16537113d406daaff7570584

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
GetCurrentDirectoryA
GetShortPathNameA
FindResourceExA
EnumResourceLanguagesA
ResumeThread
WriteProcessMemory
RaiseException
SetFileAttributesA
CreateDirectoryA
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentThreadId
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LocalFree
GetProcAddress
GetModuleFileNameW
InitializeCriticalSection
WideCharToMultiByte
RtlUnwind
GetStringTypeW

user32

DefWindowProcA
SetFocus
AdjustWindowRectEx

advapi32

RegCreateKeyA
RegSetValueA
RegCloseKey

ole32

ReadClassStm
CoRegisterClassObject

oleaut32

SysAllocString

Sections

0
Size: 280KB - Virtual size: 514KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

1
Size: 28KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: 16KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5
Size: 48KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

7
Size: 8KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d60a80fc16537113d406daaff7570584

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

Sections

0 Size: 280KB - Virtual size: 514KB

1 Size: 28KB - Virtual size: 156KB

2 Size: 16KB - Virtual size: 120KB

3 Size: 48KB - Virtual size: 45KB

4 Size: 4KB - Virtual size: 4KB

5 Size: 48KB - Virtual size: 70KB

6 Size: 8KB - Virtual size: 4KB

7 Size: 8KB - Virtual size: 30KB

0
Size: 280KB - Virtual size: 514KB

1
Size: 28KB - Virtual size: 156KB

2
Size: 16KB - Virtual size: 120KB

3
Size: 48KB - Virtual size: 45KB

4
Size: 4KB - Virtual size: 4KB

5
Size: 48KB - Virtual size: 70KB

6
Size: 8KB - Virtual size: 4KB

7
Size: 8KB - Virtual size: 30KB