bf149c4bb205be5ebb25f6ffcc0a1db4fd9c721be967686d4332c2cb66696dff

Sharing

Copy URL Twitter E-mail

General

Target

bf149c4bb205be5ebb25f6ffcc0a1db4fd9c721be967686d4332c2cb66696dff
Size

1.0MB
MD5

4a85565c48d611d443e1b2dec8f4b0b1
SHA1

7716f101b6c0d224f1b7732b82130b0a5aacc2de
SHA256

bf149c4bb205be5ebb25f6ffcc0a1db4fd9c721be967686d4332c2cb66696dff
SHA512

ed54047de13c65d0156a7966054a712e5504cb3694f924b07a6030dea3c6619c50e66f52d57ef8697a7fa8238359577d1e5e1740741f3cd1172e72294ad5706a
SSDEEP

3072:AoMfJgubp03CAy4Rxy6TCbjphcipJflSp48f:AoMBg59RxxTCbjpaigp48

Score

N/A

Malware Config

Signatures

Files

bf149c4bb205be5ebb25f6ffcc0a1db4fd9c721be967686d4332c2cb66696dff
.exe windows x86

34e9d84a8d22a3cc16ab658acee368bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
OutputDebugStringA
WaitForSingleObject
CreateProcessA
TerminateProcess
GetExitCodeProcess
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
GetSystemDirectoryA
GetLongPathNameA
GetTempPathA
GetCommandLineA
GetSystemTime
ExpandEnvironmentStringsA
GetVersionExA
GetFileAttributesA
MultiByteToWideChar
GetCurrentProcess
lstrlenA
GetWindowsDirectoryA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
WideCharToMultiByte
CopyFileA
MoveFileA
MoveFileExA
DeleteFileA
WriteFile
CreateFileA
GetFileSize
SetFilePointer
ReadFile
CloseHandle
Sleep
GetLastError
ReleaseMutex
CreateMutexA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
GetProcAddress
LCMapStringW
LCMapStringA
GetOEMCP
GetCPInfo
HeapSize
HeapReAlloc
RtlUnwind
GetTimeZoneInformation
GetLocalTime
RaiseException
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapFree
HeapAlloc
SetEnvironmentVariableA

user32

WaitForInputIdle
GetMessageA
DispatchMessageA
TranslateMessage
PeekMessageA

advapi32

RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegFlushKey
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegCloseKey

shell32

SHGetSpecialFolderPathA

wininet

InternetReadFile
InternetQueryDataAvailable
InternetCloseHandle
InternetOpenUrlA
InternetOpenA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 994KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

34e9d84a8d22a3cc16ab658acee368bc

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

wininet

version

Sections

.text Size: 68KB - Virtual size: 66KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 12KB - Virtual size: 994KB

.rsrc Size: 4KB - Virtual size: 808B

.text
Size: 68KB - Virtual size: 66KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 12KB - Virtual size: 994KB

.rsrc
Size: 4KB - Virtual size: 808B