edfb4f7d5fb41bfea58e7b3424c3a58b0d0e7be8571c1136d2df19cb729b4d91

Sharing

Copy URL Twitter E-mail

General

Target

edfb4f7d5fb41bfea58e7b3424c3a58b0d0e7be8571c1136d2df19cb729b4d91
Size

120KB
MD5

082bda631fa4ef531b1bb1bcf6484110
SHA1

2c20208861fe2489a55325e4ca7f74934e7dd950
SHA256

edfb4f7d5fb41bfea58e7b3424c3a58b0d0e7be8571c1136d2df19cb729b4d91
SHA512

1cfeedef8e73a9ea1e1f3f9662d2a6ee21b6698faeda7a8ec45c41afdc990de403e2b3cdc4e02b9eff4b8ddaa2100d1b9953c7972f85c5a8b511c895cd1cf430
SSDEEP

1536:slnMg9bWAdy4nHfUHD28+we3cotuFDcF4DfQKRx50KVT4iKEFXvxKqHs:slNsAdy4n/UKw4co9FMfQeN/Xey

Score

N/A

Malware Config

Signatures

Files

edfb4f7d5fb41bfea58e7b3424c3a58b0d0e7be8571c1136d2df19cb729b4d91
.exe windows x86

65d3499192d0cf1a7f4ab82e4cf927a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
MapViewOfFile
CreateFileMappingA
CloseHandle
GetFileSize
CreateFileA
SetFileAttributesW
MultiByteToWideChar
lstrlenA
CopyFileA
DeleteFileA
GetFileTime
FindNextFileA
SetFileAttributesA
lstrcpynA
GetDiskFreeSpaceA
GetProcAddress
GetModuleHandleA
ReleaseMutex
WaitForSingleObject
lstrcmpiA
GetModuleFileNameA
GetTempFileNameA
GetTempPathA
ReadFile
SetFilePointer
CreateDirectoryA
GetCurrentProcess
FormatMessageA
GetLastError
ExitProcess
UnmapViewOfFile
SetCurrentDirectoryA
GetWindowsDirectoryA
SetFileTime
SystemTimeToFileTime
CreateProcessA
GetSystemDirectoryA
lstrcmpA
GetVersion
CreateThread
CreateMutexA
CreateSemaphoreA
Sleep
VirtualFree
VirtualAlloc
SizeofResource
LockResource
LoadResource
FindResourceA
GetDriveTypeA
GetLogicalDriveStringsA
ReleaseSemaphore
OpenSemaphoreA
GetComputerNameA
GetShortPathNameA
CompareStringW
SetEnvironmentVariableA
CompareStringA
SetEndOfFile
LoadLibraryA
GetOEMCP
FindFirstFileA
FindClose
GetEnvironmentVariableA
lstrcatA
lstrcpyA
GetSystemTime
SetErrorMode
WinExec
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
GetTimeZoneInformation
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
HeapAlloc
GetFileAttributesA
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
GetStartupInfoA
GetCommandLineA
HeapDestroy
HeapCreate
HeapFree
HeapReAlloc
TerminateProcess
WideCharToMultiByte
LCMapStringA

user32

PostQuitMessage
wsprintfA
ShowWindow
DialogBoxParamA
EndDialog

advapi32

RegSetValueExA
RegCloseKey
RegRestoreKeyA
RegOpenKeyExA
RegSaveKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueExA

shell32

ShellExecuteA

ole32

CoInitialize
CoUninitialize

shlwapi

PathQuoteSpacesA

ws2_32

WSACleanup
inet_addr
gethostbyname
WSAStartup

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

65d3499192d0cf1a7f4ab82e4cf927a2

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

shlwapi

ws2_32

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 56KB - Virtual size: 56KB

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 56KB - Virtual size: 56KB