2f570d4008995efc335652b925b96040e8d69c6096b93dbf962f04b9a6c52167

Sharing

Copy URL Twitter E-mail

General

Target

2f570d4008995efc335652b925b96040e8d69c6096b93dbf962f04b9a6c52167
Size

88KB
MD5

67f5de95673edf4a8eb01e2ad908a445
SHA1

2c201e9d43157cb9b7f48475fe2f2ab31963f8e0
SHA256

2f570d4008995efc335652b925b96040e8d69c6096b93dbf962f04b9a6c52167
SHA512

08e90f20c6402022a4adfdf5de780a4257bf47f04fe94989c00f6720b8dc4b6825da3a62a7d5dc00f422c2c0a0c0cc241a3954696b3a789e1292b89234d0642e
SSDEEP

1536:5duQeTTqrIqUWfOlFcv+LFcbgEbQ8hQ081/DvT5pWrbTpRwDT9t5D:5tefSw/Eb9YarbTpRwDT9t5D

Score

N/A

Malware Config

Signatures

Files

2f570d4008995efc335652b925b96040e8d69c6096b93dbf962f04b9a6c52167
.exe windows x86

b43ad91db2689030bab9ee598cc64c53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

InterlockedDecrement
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetFilePointer
SetEndOfFile
CloseHandle
GetFileAttributesW
GetFullPathNameW
DeleteFileW
MoveFileW
CopyFileW
GetLastError
MoveFileExW
FindResourceW
CreateProcessW
WaitForSingleObject
GetDriveTypeW
FindFirstFileW
FindNextFileW
FindClose
SizeofResource
LockResource
LoadResource
FindResourceExW
CreateDirectoryW
CreateFileW
WriteFile
GetFileSize
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
GetProcAddress
GetModuleHandleA
ExitProcess
GetSystemTimeAsFileTime
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
GetLocaleInfoA
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WideCharToMultiByte
GetTimeZoneInformation
GetStdHandle
GetModuleFileNameA
LoadLibraryA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
Sleep
VirtualAlloc
RtlUnwind
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA

user32

GetDesktopWindow
UnregisterClassA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetSpecialFolderPathW

shlwapi

PathFileExistsW

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b43ad91db2689030bab9ee598cc64c53

Headers

File Characteristics

Imports

version

kernel32

user32

shell32

shlwapi

Sections

.text Size: 65KB - Virtual size: 65KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 65KB - Virtual size: 65KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 1KB - Virtual size: 1KB