c3f1b26179c6cab2c948387d1fe403c9b57870b9e020b863eae059471d60c6ad

Sharing

Copy URL Twitter E-mail

General

Target

c3f1b26179c6cab2c948387d1fe403c9b57870b9e020b863eae059471d60c6ad
Size

168KB
MD5

72b3ab80695b5676b133256ff19f874f
SHA1

6cc6a768160509cf3f86288d998f94e31806fbd5
SHA256

c3f1b26179c6cab2c948387d1fe403c9b57870b9e020b863eae059471d60c6ad
SHA512

056504f5179fd04d8708d03fd65e031c4fd836561b515c13a8356a0e15661f2ec44e92e558896c4d7bb968b6ac74284380a8e4b72224292bff162226199df4eb
SSDEEP

3072:rmNxYWvKLHRZeBeZ3QYW5MvL3jffILW9GLxEPSrLuZusaOEW:rGYWv275Z3QYUQzoiMxEPAuZDbE

Score

N/A

Malware Config

Signatures

Files

c3f1b26179c6cab2c948387d1fe403c9b57870b9e020b863eae059471d60c6ad
.exe windows x86

6a23974fc7cc19f4f39409624fe6b04c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFileEx
HeapDestroy
CompareStringW
RegisterWaitForSingleObject
GlobalUnlock
GetSystemInfo
SizeofResource
CloseHandle
FreeLibrary
DeleteFileA
DeleteFileW
SetFilePointer
GetFileAttributesA
LoadResource
InterlockedExchange
GlobalFree
lstrlenW
SetErrorMode
GetThreadLocale
CreateEventW
GetFileAttributesW
GlobalAlloc
GetVersionExA
FormatMessageW
CreateEventA
TryEnterCriticalSection
LockResource
CompareStringA
WaitForSingleObject
SetStdHandle
WaitForMultipleObjectsEx
GlobalLock
SleepEx
WaitForSingleObjectEx
FormatMessageA
GetModuleHandleA
VirtualAlloc
GetTickCount
IsDebuggerPresent
lstrlenA
GetEnvironmentStringsW
GetStartupInfoA

user32

PostMessageW
GetMenuStringW
PtInRect
AllowSetForegroundWindow
DestroyIcon
DefWindowProcW
LoadIconA
RegisterClassW
SetActiveWindow
GetMenu
TrackPopupMenu
DestroyMenu
SetWindowLongW
ShowWindowAsync
OffsetRect
ReleaseCapture
AdjustWindowRectEx
DrawFocusRect
MessageBeep
MoveWindow
GetKeyState
DestroyWindow
CreateWindowExA
SetMenuItemInfoA
GetMenuItemCount
ClientToScreen
GetActiveWindow
CheckMenuItem
CreateWindowExW
SetWindowTextW
SendMessageW
ReleaseDC
GetSubMenu
InflateRect
GetCursorPos
GetClientRect
SetCapture
UnregisterClassA
SetWindowPos
LoadStringW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoUninitialize

advapi32

AllocateAndInitializeSid
LookupAccountSidA
GetTokenInformation
SetSecurityDescriptorDacl
RegDeleteKeyA
QueryServiceStatus
IsValidSid
OpenThreadToken
RegCloseKey
GetSecurityDescriptorDacl
RegCreateKeyExA
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
GetSidIdentifierAuthority
CheckTokenMembership
RegCreateKeyW

shell32

SHBindToParent

msvcrt

__set_app_type
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
__p__fmode
_controlfp
__dllonexit
_onexit

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a23974fc7cc19f4f39409624fe6b04c

Headers

File Characteristics

Imports

kernel32

user32

ole32

advapi32

shell32

msvcrt

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 132KB - Virtual size: 237KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 132KB - Virtual size: 237KB

.rsrc
Size: 20KB - Virtual size: 19KB