aeec44de9ba0974df425afd6474683cdc404eea9cda925bd491f01fa39eb6341

Sharing

Copy URL Twitter E-mail

General

Target

aeec44de9ba0974df425afd6474683cdc404eea9cda925bd491f01fa39eb6341
Size

116KB
MD5

6b3e4325e6c9239f2f5ff72393953c03
SHA1

5bac0ac7122bd51ab878023c601de54a6788f6be
SHA256

aeec44de9ba0974df425afd6474683cdc404eea9cda925bd491f01fa39eb6341
SHA512

808c8ea560d5f00201cedd69e37ab07fa7ea5ee37f3ca005d931179231e02a95b0870b84cdf9e194ecb5c84752626d3168fb57f9a965490d34833577a8a2944d
SSDEEP

1536:R3PtROO2DPn+miU4OaWeqUnbB7Va8hLJ66VgcDSx5oYMFLi+Zfzc0HEgUjFagFEH:RlROO2Dv+LZO+vb1Vvp2Z1Ix7c0gj

Score

N/A

Malware Config

Signatures

Files

aeec44de9ba0974df425afd6474683cdc404eea9cda925bd491f01fa39eb6341
.exe windows x86

3804a7c7d7364c0b66c9740b5ac1ec02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
SetEvent
GetCurrentProcess
GetCurrentThreadId
GetModuleHandleW
CreateEventW
CreateThread
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
Sleep
WaitForSingleObject
CloseHandle
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
lstrlenW
DeleteCriticalSection
UnhandledExceptionFilter
InitializeCriticalSection

user32

CharUpperW
TranslateMessage
DispatchMessageW
GetMessageW
UnregisterClassA
CharNextW
PostThreadMessageW

advapi32

RegDeleteValueW
RegOpenKeyExW
RegCloseKey

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysStringLen
LoadRegTypeLi
LoadTypeLi
SysFreeString

atl80

ord31
ord30
ord32
ord17
ord61
ord23
ord64
ord20
ord18
ord58
ord22

msvcr80

_controlfp_s
??3@YAXPAX@Z
??_V@YAXPAX@Z
free
??_U@YAPAXI@Z
__CxxFrameHandler3
??2@YAPAXI@Z
memset
_except_handler4_common
?terminate@@YAXXZ
_unlock
_encode_pointer
__dllonexit
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson

rpcrt4

IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrCStdStubBuffer_Release
NdrCStdStubBuffer2_Release
IUnknown_Release_Proxy
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
NdrOleAllocate
NdrOleFree
NdrStubForwardingFunction
CStdStubBuffer_DebugServerRelease

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.orpc
Size: 1024B - Virtual size: 539B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.morpc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3804a7c7d7364c0b66c9740b5ac1ec02

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

atl80

msvcr80

rpcrt4

Sections

.text Size: 12KB - Virtual size: 11KB

.orpc Size: 1024B - Virtual size: 539B

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 5KB - Virtual size: 5KB

.morpc Size: 80KB - Virtual size: 80KB

.text
Size: 12KB - Virtual size: 11KB

.orpc
Size: 1024B - Virtual size: 539B

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 5KB - Virtual size: 5KB

.morpc
Size: 80KB - Virtual size: 80KB