fac41f3d250ce109776af2f5a06b4beb3ae881d81c2cf614924120688aaf0419

General

Target

fac41f3d250ce109776af2f5a06b4beb3ae881d81c2cf614924120688aaf0419
Size

30KB
MD5

dbf3a2f0d82cf45fe9e76ef1aa7de845
SHA1

f0c24befe321da304b30871df73bce4957b53cda
SHA256

fac41f3d250ce109776af2f5a06b4beb3ae881d81c2cf614924120688aaf0419
SHA512

4878faab3258a528c4d1ab7bfb7165e02307128a51f6855b13d1ae12ccc6427323a3a0cb3ba86eeff334c41950cfdbce2074b7c0bd8231e6a26cc03d3c9602d7
SSDEEP

768:VgoHYqaK6lbMmW5PryeKVE4nXKtDZpRA1zYZ:9aK6KmeGnXKtDxAJ

Score

N/A

Malware Config

Signatures

Files

fac41f3d250ce109776af2f5a06b4beb3ae881d81c2cf614924120688aaf0419
.exe windows x86

a7751ff569a152820e313507482b7c84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
DeleteFileA
CloseHandle
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetLastError
ExitThread
lstrcatA
CreateEventA
HeapAlloc
GetProcessHeap
HeapFree
Sleep
ExitProcess
GetModuleHandleA
GetCommandLineA
lstrlenA
SetEvent
GetFileAttributesA
CreateProcessA
FindClose
ResetEvent
CreateThread
FindResourceA
LoadResource
WaitForSingleObjectEx
WriteFileEx
Process32First
CompareStringA
lstrcmpA
WaitForMultipleObjects
WaitForSingleObject
FreeLibrary
CreateFileA
RtlUnwind

user32

PeekMessageA
MsgWaitForMultipleObjects
ShowWindow
DispatchMessageA
CreateWindowExA
TranslateMessage
ReleaseDC
DestroyWindow
wsprintfA

advapi32

RegSetValueExA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyExA
RegNotifyChangeKeyValue

ole32

CoInitialize
CoUninitialize

shell32

SHGetFolderPathA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a7751ff569a152820e313507482b7c84

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

shell32

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 816B

.rsrc Size: 18KB - Virtual size: 17KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 816B

.rsrc
Size: 18KB - Virtual size: 17KB