fe6b2fc97298f49b6f7387bc0dfe1503976a4a35efe657ce18802be1cf19c7bc

Sharing

Copy URL Twitter E-mail

General

Target

fe6b2fc97298f49b6f7387bc0dfe1503976a4a35efe657ce18802be1cf19c7bc
Size

139KB
MD5

0820d8d1aea4251165f61f3d4f032560
SHA1

13a3515b668791f2ab7058451d566226911f806c
SHA256

fe6b2fc97298f49b6f7387bc0dfe1503976a4a35efe657ce18802be1cf19c7bc
SHA512

0291048a95a4bdfa3fe88c4423c54563baa7a018c17f8862918f788bfcdf31a0799f9c10e8afc87e24ca352cb00b43bc54ef76543bdb784554ce048394922c64
SSDEEP

3072:Uhtw3kZ2nMS7pMzKlhV7JXlN2sZ+usgxhiQupSJyZ++:MtQs2WzKZ7h2sZ+82Qgj++

Score

N/A

Malware Config

Signatures

Files

fe6b2fc97298f49b6f7387bc0dfe1503976a4a35efe657ce18802be1cf19c7bc
.exe windows x86

38d4216cde1707d9eae9c943c4af5fb1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
GetProcAddress
LoadLibraryA
GetPrivateProfileStringA
RemoveDirectoryA
DeleteFileA
GetTempFileNameA
CreateDirectoryA
GetTempPathA
GetModuleFileNameA
LocalAlloc
DeleteCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
lstrcpyA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetStartupInfoA
CreateFileA
CloseHandle
ReadFile
SetFilePointer
GetACP
WriteFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetModuleHandleA
GetCurrentProcessId
GetTickCount
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
ExitProcess
GetCommandLineA
GetSystemTimeAsFileTime
HeapCreate
VirtualFree
IsBadWritePtr
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetCurrentThreadId
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetFileSize
InterlockedExchange
FreeLibrary

shell32

SHFileOperationA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA

ole32

CoCreateGuid

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 58KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 14.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

38d4216cde1707d9eae9c943c4af5fb1

Headers

File Characteristics

Imports

kernel32

shell32

advapi32

ole32

Sections

.text Size: 58KB - Virtual size: 58KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 58KB - Virtual size: 56KB

.rsrc Size: 11KB - Virtual size: 14.0MB

.text
Size: 58KB - Virtual size: 58KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 58KB - Virtual size: 56KB

.rsrc
Size: 11KB - Virtual size: 14.0MB