9985c5e8c8c2ac87ffc526ef95c4a076f33e8059450d72ed6c6a885b1770c331

Sharing

Copy URL Twitter E-mail

General

Target

9985c5e8c8c2ac87ffc526ef95c4a076f33e8059450d72ed6c6a885b1770c331
Size

176KB
MD5

65971e6ecc0058799200cd087fdbe743
SHA1

9163785d2cd64fe0fbd19609a02114116f8325d5
SHA256

9985c5e8c8c2ac87ffc526ef95c4a076f33e8059450d72ed6c6a885b1770c331
SHA512

a878332fe858fbf8e04e00025d4a5532f12f08e70c76cf4e6f948d756fdeda4a90b8b3348b0923c445c88f585690853f8ee8a062989df009fba505664381a087
SSDEEP

3072:5BEr4CoMKapo+Qcz7rdTMI0meD51tgHQVdl/rdUKzhXE22XhS3k:L64CoMlDnzXhpeyHZ2hQXh6

Score

N/A

Malware Config

Signatures

Files

9985c5e8c8c2ac87ffc526ef95c4a076f33e8059450d72ed6c6a885b1770c331
.exe windows x86

f1de52c4ac8c4c7f1855f0919cfaa4ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SleepEx
WaitForMultipleObjectsEx
WriteFileEx
InterlockedExchange
CreateEventA
SetStdHandle
SetEnvironmentVariableA
SizeofResource
GetSystemTime
GlobalUnlock
GetFileAttributesW
CompareStringA
CompareStringW
FormatMessageW
ReleaseMutex
GetSystemInfo
CreateEventW
TryEnterCriticalSection
ResetEvent
HeapDestroy
GetVersionExA
LockResource
SetFilePointer
GlobalLock
lstrlenW
GlobalFree
WaitForSingleObjectEx
lstrlenA
GetCurrentDirectoryA
ReadFileEx
GetFileAttributesA
GetStartupInfoA
WaitForSingleObject
GlobalAlloc
DeleteFileW
FreeLibrary
FormatMessageA
GetThreadLocale
LoadResource
SetErrorMode
DeleteFileA
CloseHandle
GetModuleHandleA
RegisterWaitForSingleObject
VirtualAlloc

user32

GetForegroundWindow
ReleaseDC
SetWindowTextW
CreateWindowExW
PostMessageA
LoadCursorW
DefWindowProcW
SetMenuItemInfoW
GetWindowWord
SetMenuItemBitmaps
DestroyIcon
SetWindowTextA

ole32

CoRegisterClassObject
CoSetProxyBlanket
CoRegisterChannelHook
CoTaskMemRealloc

advapi32

GetSidIdentifierAuthority
RegCreateKeyExA
RegOpenKeyExW
RegQueryValueExA
CheckTokenMembership
RegCloseKey
OpenThreadToken
QueryServiceStatus
GetSecurityDescriptorDacl
GetTokenInformation
RegDeleteKeyA
RegOpenKeyExA
IsValidSid
RegCreateKeyW
LookupAccountSidA
SetSecurityDescriptorDacl
AllocateAndInitializeSid

shell32

SHBindToParent

msvcrt

__set_app_type
_onexit
__dllonexit
_controlfp
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1de52c4ac8c4c7f1855f0919cfaa4ff

Headers

File Characteristics

Imports

kernel32

user32

ole32

advapi32

shell32

msvcrt

Sections

.text Size: 12KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 132KB - Virtual size: 237KB

.rsrc Size: 24KB - Virtual size: 20KB

.text
Size: 12KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 132KB - Virtual size: 237KB

.rsrc
Size: 24KB - Virtual size: 20KB