61f41a50154bae04b8f43fb2d6101a090ead73b699a71e488f0d6e0ecedf199b

Sharing

Copy URL Twitter E-mail

General

Target

61f41a50154bae04b8f43fb2d6101a090ead73b699a71e488f0d6e0ecedf199b
Size

1.2MB
MD5

f78280e88f15c0f1f4a6507a85916562
SHA1

24e34a7367e8e793d4bad4b558ae4cba029f7084
SHA256

61f41a50154bae04b8f43fb2d6101a090ead73b699a71e488f0d6e0ecedf199b
SHA512

10d8bb40463808b886b16a6d1214ffd5df35b5b0885a234f1b2957231b6d8dd2f122224f1006c154a07fcbb0e505be046d60420e9219e3d79886ccf4027df8ef
SSDEEP

24576:RrhM5Oq4fXla4L9oYZXfr+TbPwDrUiceq5WhIKd0KNJ:9RfXla43k6

Score

N/A

Malware Config

Signatures

Files

61f41a50154bae04b8f43fb2d6101a090ead73b699a71e488f0d6e0ecedf199b
.exe windows x86

f96f76d8b7caa50623cfe897c666a393

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

avicap32

capCreateCaptureWindowA
capGetDriverDescriptionA

kernel32

Sleep
GetProcAddress
LoadLibraryA
WideCharToMultiByte
lstrcpyA
lstrlenA
lstrcatA
lstrcmpA
GetPrivateProfileStringA
DeleteFileA
CreateDirectoryA
GetFileAttributesA
CreateProcessA
GetDriveTypeA
GetVolumeInformationA
GetLogicalDriveStringsA
FindClose
LocalFree
FindFirstFileA
LocalAlloc
MoveFileA
GetVersion
DeviceIoControl
MultiByteToWideChar
InterlockedExchange
HeapFree
HeapAlloc
GetProcessHeap
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
QueryPerformanceCounter
QueryPerformanceFrequency
SetThreadPriority
SetPriorityClass
GetThreadPriority
GetCurrentThread
GetPriorityClass
GetCurrentProcess
GlobalMemoryStatus
GetTickCount
GetStartupInfoA
Process32Next
ReadFile
RtlUnwind
ExitProcess
TerminateProcess
GetLastError
CreateThread
GetCurrentThreadId
TlsSetValue
TlsGetValue
ExitThread
GetModuleHandleA
GetCommandLineA
TlsAlloc
SetLastError
RaiseException
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
CloseHandle
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
FlushFileBuffers
SetFilePointer
LCMapStringA
LCMapStringW
FreeLibrary

ole32

CoInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

netapi32

NetUserAdd
NetLocalGroupAddMembers

Sections

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f96f76d8b7caa50623cfe897c666a393

Headers

File Characteristics

Imports

avicap32

kernel32

ole32

oleaut32

urlmon

netapi32

Sections

.rdata Size: 44KB - Virtual size: 44KB

.data Size: 1.1MB - Virtual size: 1.1MB

.rsrc Size: 4KB - Virtual size: 4KB

.adata Size: 116KB - Virtual size: 116KB

.rdata
Size: 44KB - Virtual size: 44KB

.data
Size: 1.1MB - Virtual size: 1.1MB

.rsrc
Size: 4KB - Virtual size: 4KB

.adata
Size: 116KB - Virtual size: 116KB