9122f70f272b850b19c615c3abaef51cf2a28913f3d356ac0bcac056725df1f0

Sharing

Copy URL Twitter E-mail

General

Target

9122f70f272b850b19c615c3abaef51cf2a28913f3d356ac0bcac056725df1f0
Size

122KB
MD5

a92c63387c2fb5d8d7f4b2685bb1eac2
SHA1

368020ad81e44c83317e82dfacfa7b9f4ad0fb11
SHA256

9122f70f272b850b19c615c3abaef51cf2a28913f3d356ac0bcac056725df1f0
SHA512

ea3fc08472556ff1e399c828a51c05781da397554cd7c11be323dc0a6c944a4ac7f2b7e342696add8b3285eece0c8d74ad0432b7d3f02472ca177b679dad29dc
SSDEEP

1536:YaUZTCV1mCpAPQXyTpiZ5sj9JWwnCU/+HSMC2piVuO80XtUCuCmw7hM950LO8pka:EZTCV1mCpAPMg4wSJrwdHmw7hi50aGb

Score

N/A

Malware Config

Signatures

Files

9122f70f272b850b19c615c3abaef51cf2a28913f3d356ac0bcac056725df1f0
.exe windows x86

4dc2867cde04707fee91ead401591b1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
LocalFree
CreateThread
CreateFileA
HeapAlloc
WriteFile
GetVersionExW
GetLastError
GetModuleHandleA
GetComputerNameA
InterlockedIncrement
InterlockedDecrement
GetVolumeInformationA
GetTickCount
GetCurrentProcessId
GetVersionExA
GetVersion
Sleep
GetExitCodeProcess
CreateProcessA
GetTempPathA
lstrcpyA
FlushFileBuffers
WinExec
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
VirtualAlloc
HeapReAlloc
LeaveCriticalSection
EnterCriticalSection
GetConsoleMode
GetConsoleCP
SetFilePointer
QueryPerformanceCounter
VirtualFree
HeapCreate
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ReleaseMutex
CreateMutexA
GetModuleFileNameA
LocalAlloc
LoadLibraryA
GetProcAddress
TerminateThread
GetProcessHeap
WaitForSingleObject
HeapFree
FreeLibrary
lstrlenA
GetStdHandle
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
ExitProcess
HeapSize
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
RaiseException

user32

TrackPopupMenu
GetMenuItemID
KillTimer
GetSubMenu
SetForegroundWindow
LoadMenuA
FindWindowA
RegisterWindowMessageA
GetCursorPos
DrawMenuBar
PostMessageA
SetMenuDefaultItem
DestroyMenu
DestroyWindow
GetMessageA
RegisterClassExA
PostQuitMessage
GetParent
LoadIconA
SendMessageA
TranslateMessage
CreateWindowExA
EnableMenuItem
DefWindowProcA
DispatchMessageA

advapi32

RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
FreeSid
AllocateAndInitializeSid
RegDeleteValueA
RegOpenKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclA

shell32

Shell_NotifyIconA

oleaut32

VariantClear

shlwapi

AssocQueryStringA

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4dc2867cde04707fee91ead401591b1e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

oleaut32

shlwapi

Sections

.text Size: 75KB - Virtual size: 74KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 5KB - Virtual size: 15KB

.rsrc Size: 16KB - Virtual size: 16KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 75KB - Virtual size: 74KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 5KB - Virtual size: 15KB

.rsrc
Size: 16KB - Virtual size: 16KB

.reloc
Size: 8KB - Virtual size: 8KB