fa208a1b015afa4a01a6f61bda9968eb89e6d23d86c39bc7e13ad9b5e6cac2d1

Sharing

Copy URL Twitter E-mail

General

Target

fa208a1b015afa4a01a6f61bda9968eb89e6d23d86c39bc7e13ad9b5e6cac2d1
Size

419KB
MD5

856acf10fb7226e0f6845ef7d799a13b
SHA1

f7a77f64bbcc6b131c6de343938e20f0ee9ab6c5
SHA256

fa208a1b015afa4a01a6f61bda9968eb89e6d23d86c39bc7e13ad9b5e6cac2d1
SHA512

5677f07dc929c485b33caab8e61ab998c211f6bff16d1b6497001a4fe7b8f861ad5e0b339f9119feefdf47ba8898efd168edda49deb1191a8d85f7a9f17b1d1c
SSDEEP

3072:oJ53vyFdifiL0N6HzHnwMlJw7q/l5pz/SMOFS2DRAJbLosFfi04G:o73vy7IIHzHfV/l5aQ0cPVt4

Score

N/A

Malware Config

Signatures

Files

fa208a1b015afa4a01a6f61bda9968eb89e6d23d86c39bc7e13ad9b5e6cac2d1
.exe windows x86

147d7e9d78bee4d8349267ce1491880f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameW
GetShortPathNameW
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GetVersionExW
GetCurrentThreadId
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WriteFile
lstrcatW
lstrlenW
GetCurrentProcessId
GetCurrentProcess
DeleteFileW
CreateSemaphoreW
CreateFileW
CloseHandle
VirtualAllocEx
CreateFileA
GetModuleHandleA
GetOEMCP
QueryPerformanceCounter
GetACP

user32

MessageBoxW
LoadStringW
FindWindowW
SetFocus
LoadIconA
LoadCursorW
LoadIconW
LoadCursorA
SetForegroundWindow
ExitWindowsEx

advapi32

RegQueryValueExA
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegCreateKeyW
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExW
RegSetValueExW
RegOpenKeyExA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW

msvcrt

_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
exit
mbstowcs
setlocale

Sections

.text
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

192
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data5
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

191
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

19
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

18
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

17
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

16
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

15
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

147d7e9d78bee4d8349267ce1491880f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

msvcrt

Sections

.text Size: 240KB - Virtual size: 240KB

192 Size: 3KB - Virtual size: 3KB

.data Size: 3KB - Virtual size: 2KB

.data5 Size: 138KB - Virtual size: 137KB

.data4 Size: 1024B - Virtual size: 1000B

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 1024B - Virtual size: 1000B

191 Size: 3KB - Virtual size: 3KB

19 Size: 3KB - Virtual size: 3KB

18 Size: 3KB - Virtual size: 3KB

17 Size: 3KB - Virtual size: 3KB

16 Size: 3KB - Virtual size: 3KB

15 Size: 3KB - Virtual size: 3KB

.rsrc Size: 9KB - Virtual size: 8KB

.text
Size: 240KB - Virtual size: 240KB

192
Size: 3KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 2KB

.data5
Size: 138KB - Virtual size: 137KB

.data4
Size: 1024B - Virtual size: 1000B

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 1024B - Virtual size: 1000B

191
Size: 3KB - Virtual size: 3KB

19
Size: 3KB - Virtual size: 3KB

18
Size: 3KB - Virtual size: 3KB

17
Size: 3KB - Virtual size: 3KB

16
Size: 3KB - Virtual size: 3KB

15
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 9KB - Virtual size: 8KB