bf833c8523c6bb0fb6f7c082e19002268f8bed3f57cda063c7c00cc2fbd232a4

Sharing

Copy URL Twitter E-mail

General

Target

bf833c8523c6bb0fb6f7c082e19002268f8bed3f57cda063c7c00cc2fbd232a4
Size

570KB
MD5

9a683337947a0a2298a2421bbe70187b
SHA1

1bdd189a3cb1805e2d470dd25d6a85da433bcd1c
SHA256

bf833c8523c6bb0fb6f7c082e19002268f8bed3f57cda063c7c00cc2fbd232a4
SHA512

956d2a396936b037e49b736c0304a1b92975486bbd2d539765b8397d30beba0f4d9ae6ac3eaba81f798d49e7d0609673fb8b1592566000ff11d71ab5f40c804c
SSDEEP

12288:dNnePAABgQaf+4jwf+kYxfZewnOgX9kBxAv2t3jNk:fnePTA+X+tF78Kk5k

Score

N/A

Malware Config

Signatures

Files

bf833c8523c6bb0fb6f7c082e19002268f8bed3f57cda063c7c00cc2fbd232a4
.exe windows x86

7d2431e618c198a6447664b477d455bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetTickCount
GetCurrentThread
ExitProcess
HeapAlloc
GetProcessHeap
VirtualAlloc
FindResourceA
Sleep
VirtualFree
CloseHandle
ReadFile
SetFilePointer
MapViewOfFile
RaiseException
HeapSize
GetCPInfo
LockResource
GetEnvironmentStrings
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
FindResourceW
GlobalFree
lstrlenA
LCMapStringW
InterlockedIncrement
TlsSetValue
GetFileType
CreateFileW
FindNextFileA
GetProcAddress
GetWindowsDirectoryA
CreateDirectoryA
GetStartupInfoA
FreeLibrary
LoadLibraryA
GetCommandLineA
TlsAlloc
GetOEMCP
lstrcmpiA
SetHandleCount
EnterCriticalSection
LeaveCriticalSection
GetLocaleInfoA
SetEndOfFile
GlobalAlloc
SetUnhandledExceptionFilter
MulDiv
CreateFileA
CreateThread
MultiByteToWideChar
UnhandledExceptionFilter
GetPrivateProfileStringA
GetModuleFileNameA
FlushFileBuffers
IsDebuggerPresent
SetLastError
TlsGetValue
FindClose
LoadResource
InitializeCriticalSection
LocalFree
SetEvent
GetStringTypeW
WriteFile
WideCharToMultiByte
GetTempPathA
FreeEnvironmentStringsW
SetErrorMode
lstrcatA
GetCurrentProcess
GetLocalTime
GetFileAttributesW
HeapFree
GetFileAttributesA
GetModuleHandleA
GetVersion
GetCurrentThreadId
GetVersionExA
GetCurrentProcessId

advapi32

RegQueryValueExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA

user32

GetClientRect
InvalidateRect
SystemParametersInfoA
MessageBoxA
SetForegroundWindow
ScreenToClient
GetDlgItem
GetWindowLongA
CheckMenuItem
SetWindowTextA
GetSystemMetrics
DefWindowProcA
SetFocus
SetTimer
GetSubMenu
LoadStringA
TranslateMessage
SetWindowPos
PeekMessageA
EnableWindow
UpdateWindow
GetMessageA
DestroyWindow
GetDC
EndPaint
DispatchMessageA
IsWindow
PostQuitMessage
DestroyMenu

Sections

.text
Size: 538KB - Virtual size: 861KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d2431e618c198a6447664b477d455bf

Headers

File Characteristics

Imports

kernel32

advapi32

user32

Sections

.text Size: 538KB - Virtual size: 861KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 15KB - Virtual size: 15KB

.rsrc Size: 11KB - Virtual size: 10KB

.text
Size: 538KB - Virtual size: 861KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 15KB - Virtual size: 15KB

.rsrc
Size: 11KB - Virtual size: 10KB