bb663741c9fc18f4add4bfe39503cf58f5185095dbc16015f586c30ce7f366e0

Sharing

Copy URL

Twitter E-mail

General

Target

bb663741c9fc18f4add4bfe39503cf58f5185095dbc16015f586c30ce7f366e0
Size

37KB
MD5

5702f9a964ee2e77c974a73e0cec9c51
SHA1

6a90a230d506f82083fb616011594a23d1def897
SHA256

bb663741c9fc18f4add4bfe39503cf58f5185095dbc16015f586c30ce7f366e0
SHA512

64ed4fa0dbc1e12ac6f0e55ff824b0fc98f7c0cab3f0e8358d61fc37d6ccc1aea00a97747735f1863a7eea037c393c6b5321fdf5802f7652cbfffc3d8d563356
SSDEEP

768:fIgMlnd1ZfnD2jbMWumX7NblBgjJlR1CFiUiGt0S0N7fkeE5PHkwp5eonSS:fedkwpxN7frE5HpEo7

Score

N/A

Malware Config

Signatures

Files

bb663741c9fc18f4add4bfe39503cf58f5185095dbc16015f586c30ce7f366e0
.exe windows x86

2e4db58c8c9636ac966ac3aaaf6945d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetLastError
CopyFileA
SetFileAttributesA
GetFileAttributesA
lstrcmpiA
GetTempPathA
GetModuleFileNameA
GetModuleHandleA
CreateProcessA
ExitProcess
WriteFile
CreateFileA
ExpandEnvironmentStringsA
ExitThread
GetSystemDefaultLangID
GlobalUnlock
GlobalLock
lstrlenA
CreateDirectoryA
lstrcatA
GetDriveTypeA
GetLogicalDriveStringsA
CreateMutexA
SetErrorMode
IsBadCodePtr
SetUnhandledExceptionFilter
RaiseException
LocalFree
ReadFile
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
CloseHandle
Sleep
GetLocaleInfoA
GlobalAlloc
GetTickCount
GetStringTypeA
FlushFileBuffers
SetStdHandle
SetFilePointer
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
HeapReAlloc
VirtualAlloc
HeapFree
VirtualFree
HeapCreate
HeapDestroy
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion

user32

keybd_event
EmptyClipboard
FindWindowA
VkKeyScanA
GetForegroundWindow
BlockInput
OpenClipboard
CloseClipboard
SetFocus
ShowWindow
SetForegroundWindow
wsprintfA
SetClipboardData

advapi32

RegDeleteKeyA
RegCreateKeyA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyA

shell32

ShellExecuteA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

VariantClear
VariantInit
SysAllocString

ws2_32

connect
recv
gethostbyname
inet_addr
closesocket
WSACleanup
WSAStartup
socket
htons
send
select

shlwapi

PathRemoveFileSpecA

urlmon

URLDownloadToFileA

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2e4db58c8c9636ac966ac3aaaf6945d0

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

ws2_32

shlwapi

urlmon

Sections

.text Size: 27KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 13KB

.text
Size: 27KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 13KB