766fe4ca2c1cdfd82931d1e6f9d795ba4c37f28635ff260145e18ac282161eac

Sharing

Copy URL

Twitter E-mail

General

Target

766fe4ca2c1cdfd82931d1e6f9d795ba4c37f28635ff260145e18ac282161eac
Size

122KB
MD5

ef12b5b77fde7f38357ddd4bfe2f87c6
SHA1

cc37132c456e616b74bafaeddd092001f4a68c4c
SHA256

766fe4ca2c1cdfd82931d1e6f9d795ba4c37f28635ff260145e18ac282161eac
SHA512

9a67b244a9c02e80db1bff0e14a4c9817a2596297c480ceffb398a8c03ec8d728669ec0d2648ba7b219634123b09a9bdb8645b87230c948ff90b594a7138c087
SSDEEP

3072:F+QLFWoBpmnyaZkhEiOu5BCs62XQlDJ9r9BdDqeeCtt+XVWF:FbFVBpmnxqhEiOElXQd79BMNSt+FWF

Score

N/A

Malware Config

Signatures

Files

766fe4ca2c1cdfd82931d1e6f9d795ba4c37f28635ff260145e18ac282161eac
.exe windows x86

9a270604dfaf1fe8d2c9e5bcbf9ac62e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
LoadLibraryW
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
lstrlenW
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
GlobalUnlock
GlobalLock
LeaveCriticalSection
EnterCriticalSection
InterlockedCompareExchange
lstrcpynW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
CloseHandle
InitializeCriticalSection
Sleep
GetCurrentThreadId
CreateThread
CreateEventW
SetEvent
GetCommandLineW
GetSystemDirectoryW
LoadLibraryA
RaiseException
GetVersionExW
LocalAlloc
GetVersionExA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersion
GetFileAttributesW
GetModuleHandleA
GetProcAddress
GetModuleHandleW
WaitForSingleObject

user32

PeekMessageW
CharNextW
SendMessageW
SetParent
ShowWindow
CharUpperW
DispatchMessageW
TranslateMessage
CreateWindowExW
DefWindowProcW
EnableWindow
RegisterClassExW
PostThreadMessageW
GetMessageW

advapi32

RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegSetValueExW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
GetHGlobalFromStream
CreateStreamOnHGlobal
CoUninitialize
CoInitializeEx
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
StringFromGUID2
CoCreateInstance

msvcrt

__wgetmainargs
_controlfp
??1type_info@@UAE@XZ
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
memset
_amsg_exit
_wcmdln
_except_handler3
free
malloc
_CxxThrowException
wcslen
__CxxFrameHandler
realloc
_c_exit
_exit
_XcptFilter
_cexit
exit

shlwapi

PathFindExtensionW

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9a270604dfaf1fe8d2c9e5bcbf9ac62e

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

msvcrt

shlwapi

Sections

.text Size: 32KB - Virtual size: 32KB

.data Size: 512B - Virtual size: 844B

.rsrc Size: 81KB - Virtual size: 84KB

.text
Size: 32KB - Virtual size: 32KB

.data
Size: 512B - Virtual size: 844B

.rsrc
Size: 81KB - Virtual size: 84KB