ab911f3f9e7b6fdd2927ae4a03cff4b12e9fe61158f1fb9aa2afd56d99054bc9

Sharing

Copy URL Twitter E-mail

General

Target

ab911f3f9e7b6fdd2927ae4a03cff4b12e9fe61158f1fb9aa2afd56d99054bc9
Size

302KB
MD5

f8f912ea9297a57f02f6429702b7dbd7
SHA1

1a1159a621c818053087b6a881f2119c38262dbd
SHA256

ab911f3f9e7b6fdd2927ae4a03cff4b12e9fe61158f1fb9aa2afd56d99054bc9
SHA512

5fa0869a9d60cc9d9439dafa08e7515cb7ef66a5f180224f9946524d9849bae01da8e09388867780a4e26fed969398e2b7d1588cfed9de1978acd1c320e836d9
SSDEEP

6144:0r7beYd6upMOOsrLJffxOD3pZSVrdoTeJsVkbE9ucqe7fWJGflTvuLE:0r7yFf0LJffxOD5ZSRdoTeq59ufe7fWK

Score

N/A

Malware Config

Signatures

Files

ab911f3f9e7b6fdd2927ae4a03cff4b12e9fe61158f1fb9aa2afd56d99054bc9
.exe windows x86

3c82a3e3d902843c8be455bba2a0507b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
ReadFile
VirtualFree
QueryDosDeviceA
GetFileSize
DeviceIoControl
FindNextFileA
VirtualAlloc
GetFullPathNameA
WriteFile
CloseHandle
RtlUnwind
CreateEventA
GetTimeZoneInformation
FreeLibrary
DuplicateHandle
GetLogicalDrives
ResetEvent
GetCurrentThreadId
OutputDebugStringA
DeleteFileA
FlushFileBuffers
WideCharToMultiByte
CreateFileA
CreateThread
IsBadCodePtr
GetSystemTime
WaitForSingleObject
SystemTimeToFileTime
EnterCriticalSection
FindClose
SetFilePointer
GetFileTime
DeleteCriticalSection
LeaveCriticalSection
FindFirstFileA
GetSystemTimeAsFileTime
GetModuleHandleA
UnhandledExceptionFilter
FileTimeToSystemTime
CreateMutexA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

ole32

CoInitialize
CoUninitialize

user32

GetUserObjectInformationA
MessageBoxA
GetProcessWindowStation

msvcrt

_XcptFilter
malloc
fopen
_snprintf
swprintf
fflush
wcsncpy
_purecall
__CxxFrameHandler
printf
localtime
rand
strncmp
_errno
ctime
fseek
toupper
wcsstr
memmove
free
strncpy
strstr
time
fprintf
_CxxThrowException
_splitpath
memcpy
vsprintf
_initterm
ftell
fread
_wcsicmp
fclose
_strupr
_stricmp
srand
_amsg_exit
calloc
sprintf
memset

esent

JetCreateIndex
JetDelete
JetOpenFileSectionInstance
JetOpenTempTable
JetCreateIndex2
JetAddColumn
JetOSSnapshotFreeze
JetEnableMultiInstance
JetOpenFile
JetDeleteColumn2
JetDBUtilities
JetBeginTransaction
JetGetSecondaryIndexBookmark
JetOpenTempTable3
JetRestore
JetRestoreInstance
JetExternalRestore2
JetSetCurrentIndex
JetGetTableIndexInfo
JetMakeKey
JetDetachDatabase
JetStopServiceInstance

iprtprio

GetPriorityInfo
SetPriorityInfo

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 275KB - Virtual size: 461KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c82a3e3d902843c8be455bba2a0507b

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

user32

msvcrt

esent

iprtprio

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 275KB - Virtual size: 461KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 275KB - Virtual size: 461KB

.rsrc
Size: 3KB - Virtual size: 2KB