cdaba07589c17c84833e50925240c7b2d7540032cf2fa407d7cd4d98e4decbfa

Sharing

Copy URL Twitter E-mail

General

Target

cdaba07589c17c84833e50925240c7b2d7540032cf2fa407d7cd4d98e4decbfa
Size

65KB
MD5

32e295cf09b0cd074eba7b826810c0ed
SHA1

c9552579225e8245098043527e25a74e1517d2b3
SHA256

cdaba07589c17c84833e50925240c7b2d7540032cf2fa407d7cd4d98e4decbfa
SHA512

dce7068e6b5dc126c2fad11c70bcda3a4c84a22428e5c558d4e47b98e4c60082d5fe97aa224261b3931e2c0e7fa548eae6699450e8bac8f2c4da6ae11446f3d1
SSDEEP

768:TbwW1cvfc2UVXjlw53qLapQ+4VtTlsObziUElTKRA6e7o6WDmmtjE:gWDTzapQtTDbzi/FKRY7TW3+

Score

N/A

Malware Config

Signatures

Files

cdaba07589c17c84833e50925240c7b2d7540032cf2fa407d7cd4d98e4decbfa
.exe windows x86

de9450cc7e88615b101e8a89f613db9d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveFileSpecA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

kernel32

FreeLibrary
GetACP
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
GetShortPathNameA
GetVersion
LoadLibraryA
LocalFree
MultiByteToWideChar
Sleep
lstrcpynA
lstrlenA
lstrcmpW
GetProcAddress

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoW

user32

CharPrevA
CharUpperA
GetCursorPos
MessageBoxA
PostMessageA
SetFocus
SetForegroundWindow
WinHelpA

loadperf

UpdatePerfNameFilesA
LoadPerfCounterTextStringsA
BackupPerfRegistryToFileW

Sections

.edata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CbO
Size: 2KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.TV
Size: 4KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.k
Size: 4KB - Virtual size: 649KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 9KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xSQvjS
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 11KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de9450cc7e88615b101e8a89f613db9d

Headers

File Characteristics

Imports

shlwapi

advapi32

kernel32

version

user32

loadperf

Sections

.edata Size: 6KB - Virtual size: 6KB

.CbO Size: 2KB - Virtual size: 423KB

.text Size: 14KB - Virtual size: 14KB

.TV Size: 4KB - Virtual size: 181KB

.rdata Size: 1KB - Virtual size: 27KB

.k Size: 4KB - Virtual size: 649KB

.edata Size: 9KB - Virtual size: 97KB

.xSQvjS Size: 512B - Virtual size: 4KB

.data Size: 8KB - Virtual size: 339KB

.edata Size: 11KB - Virtual size: 29KB

.rsrc Size: 2KB - Virtual size: 2KB

.edata
Size: 6KB - Virtual size: 6KB

.CbO
Size: 2KB - Virtual size: 423KB

.text
Size: 14KB - Virtual size: 14KB

.TV
Size: 4KB - Virtual size: 181KB

.rdata
Size: 1KB - Virtual size: 27KB

.k
Size: 4KB - Virtual size: 649KB

.edata
Size: 9KB - Virtual size: 97KB

.xSQvjS
Size: 512B - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 339KB

.edata
Size: 11KB - Virtual size: 29KB

.rsrc
Size: 2KB - Virtual size: 2KB