9ab3f4a37e10b77aec1044006c916abf3d957fb64ae0042e1c5b4828762758d4

Sharing

Copy URL Twitter E-mail

General

Target

9ab3f4a37e10b77aec1044006c916abf3d957fb64ae0042e1c5b4828762758d4
Size

205KB
MD5

4200b41b5a3ae8eef016c90be9d6e056
SHA1

e810aca38668654b90e53a0c20dd5d6b6c059d90
SHA256

9ab3f4a37e10b77aec1044006c916abf3d957fb64ae0042e1c5b4828762758d4
SHA512

27e0727c8ddec8440371137b34dab29124c2e44c4d9112b3c3d9f06acb7549e694416d7ad2b8e9167f1663b76b1cdfd1d23a17e7296971683383ea2a4229b570
SSDEEP

3072:lmvTxlKI3V+LlQ/8EiSKX+xgYZyIeDft05iNaI93yRRpvOr0aWpBAoo7FeMt1anb:l09lKI3VfQ5vzNN3yRcaC1gb

Score

N/A

Malware Config

Signatures

Files

9ab3f4a37e10b77aec1044006c916abf3d957fb64ae0042e1c5b4828762758d4
.exe windows x86

5b5d84bcc7e19e4bee4b60c898b5025c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy
_purecall
memset
wcschr
_wtoi
_vsnwprintf
_onexit
_lock
__dllonexit
_unlock
_amsg_exit
_initterm
free
malloc
_XcptFilter

kernel32

GlobalMemoryStatus
GetLocalTime
GetVersion
GetEnvironmentStringsW
GetDiskFreeSpaceA
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
DisableThreadLibraryCalls
lstrlenW
GetModuleFileNameW
FindAtomW
GetVersionExW
InterlockedDecrement
MultiByteToWideChar
lstrlenA
GetLastError
GetModuleFileNameA
InterlockedIncrement
FreeLibrary
LoadLibraryW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
CreateEventW
SetEvent
ResetEvent
WaitForSingleObject
ReleaseSemaphore
GetSystemInfo
VirtualFree
lstrcmpW
GetCurrentProcess
GetCurrentThreadId
CreateSemaphoreW
VirtualAlloc
InterlockedExchange
GetProcAddress
GetModuleHandleW
SetThreadPriority
GetTickCount
CreateThread
Sleep
InterlockedCompareExchange
RtlUnwind
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LoadLibraryA
GetModuleHandleA
HeapAlloc
GetProcessHeap
HeapFree
GetVersionExA
DeviceIoControl
GlobalAlloc

gdi32

GetTextExtentPointW

user32

LoadStringW
SendMessageW
ReleaseDC
GetDC
SetDlgItemInt
GetDlgItemInt
IsRectEmpty
SetWindowLongW
InvalidateRect
DestroyWindow
CreateDialogParamW
MoveWindow
GetDesktopWindow
DefWindowProcW
GetWindowRect
GetWindowLongW
ShowWindow
EqualRect

advapi32

RegDeleteKeyW
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueW
RegQueryValueExW
RegCreateKeyW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey

ole32

StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemFree

msdmo

MoFreeMediaType

msi

MsiGetFeatureStateA
MsiGetPropertyW
MsiSetFeatureAttributesA
MsiEnumClientsA
MsiSourceListClearAllExW
MsiGetFeatureCostA
MsiProvideAssemblyW
MsiRecordGetInteger
MsiRecordSetStringA
MsiSourceListForceResolutionA
MsiOpenPackageExA
MsiDeterminePatchSequenceW
MsiProvideQualifiedComponentW
MsiProvideComponentFromDescriptorA
MsiDatabaseGenerateTransformA
MsiIsProductElevatedW
MsiGetShortcutTargetW
MsiSummaryInfoGetPropertyW
MsiSourceListGetInfoA
MsiQueryFeatureStateFromDescriptorW
MsiDetermineApplicablePatchesA
MsiEnumClientsW

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1024B - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1024B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1024B - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 98KB - Virtual size: 986KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 2KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b5d84bcc7e19e4bee4b60c898b5025c

Headers

File Characteristics

Imports

msvcrt

kernel32

gdi32

user32

advapi32

ole32

msdmo

msi

Sections

.text Size: 17KB - Virtual size: 17KB

Size: 512B - Virtual size: 7KB

Size: 1KB - Virtual size: 15KB

Size: 1024B - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 3KB

Size: 1024B - Virtual size: 10KB

Size: 1024B - Virtual size: 18KB

Size: 2KB - Virtual size: 21KB

Size: 1KB - Virtual size: 22KB

.data Size: 98KB - Virtual size: 986KB

Size: 1KB - Virtual size: 6KB

Size: 2KB - Virtual size: 40KB

Size: 512B - Virtual size: 49KB

.rsrc Size: 70KB - Virtual size: 69KB

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 98KB - Virtual size: 986KB

.rsrc
Size: 70KB - Virtual size: 69KB