f81034cf6f1764f8cec82b5d1d12d481b8a96f2b41f9a0ecac0a9eeb39b6d7de

Sharing

Copy URL

Twitter E-mail

General

Target

f81034cf6f1764f8cec82b5d1d12d481b8a96f2b41f9a0ecac0a9eeb39b6d7de
Size

76KB
MD5

1fe177a5151a563af39cf63b22b1bf53
SHA1

7302a125f21ddbf967ace6fbd5b0aa6b7214b348
SHA256

f81034cf6f1764f8cec82b5d1d12d481b8a96f2b41f9a0ecac0a9eeb39b6d7de
SHA512

6f2bb4e4032a951a3da4289865b14fc71e746131985f479ed6acd31c5ddce06d3513a6b564fd6e0d0ae314dd8b94c66d209bcb1fc1fc2bd58895950fa2297253
SSDEEP

1536:bJEzl0O3qftEUjZVK0roPvLU8nUf7ugZjsMIp4YTb3qVgHlye1WrmxMqRTd/lK9o:bJEzl0O3q1EUjZVK0roPvLU8nUf7ugZJ

Score

N/A

Malware Config

Signatures

Files

f81034cf6f1764f8cec82b5d1d12d481b8a96f2b41f9a0ecac0a9eeb39b6d7de
.exe windows x86

e21edf78d4b833695a8cece90ec793c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationW
GetDriveTypeW
CreateThread
GetComputerNameW
CreateMutexW
FindClose
GetSystemDirectoryW
GetWindowsDirectoryW
GetCurrentDirectoryW
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetConsoleWindow
CreateIoCompletionPort
InterlockedDecrement
CreateFileW
GetTickCount
GetQueuedCompletionStatus
InterlockedIncrement
GetDiskFreeSpaceW
DeleteFileW
CopyFileW
SetCurrentDirectoryW
SetFileAttributesW
GetSystemDefaultLangID
SetFileTime
RemoveDirectoryW
GetLogicalDriveStringsW
GetVersion
Sleep
DeviceIoControl
UnmapViewOfFile
GetVersionExW
CloseHandle
MapViewOfFile
LocalFree
FreeLibrary
LoadLibraryW
ReadDirectoryChangesW
GetProcAddress

user32

SendMessageW
wsprintfW
LoadIconW
DispatchMessageW
TranslateMessage
GetForegroundWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
DefWindowProcW
PostQuitMessage
GetMessageW
GetWindowTextW

advapi32

SetEntriesInAclW
GetSecurityInfo
GetUserNameW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegDeleteValueW
SetSecurityInfo

shell32

ShellExecuteW

mfc42u

ord356
ord2762
ord2773
ord3173
ord1971
ord3313
ord665
ord5180
ord354
ord3332
ord1165
ord1143
ord3806
ord4053
ord3176
ord561
ord815
ord800
ord2910
ord2810
ord540
ord825
ord823
ord668
ord1972
ord3314

msvcrt

memcpy
_controlfp
_except_handler3
__set_app_type
__p__fmode
memset
wcsstr
wcsncat
fseek
fgetws
wprintf
_wmkdir
exit
wcslen
fwprintf
wcscpy
fclose
_wfopen
wcscat
__CxxFrameHandler
wcsrchr
_endthreadex
_ltoa
wcscmp
wcsncpy
_ltow
printf
swprintf
fwrite
fread
__dllonexit
_onexit
_exit
_XcptFilter
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

msvcp60

??0Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e21edf78d4b833695a8cece90ec793c4

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

mfc42u

msvcrt

msvcp60

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 14KB

.rsrc Size: 24KB - Virtual size: 92KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 14KB

.rsrc
Size: 24KB - Virtual size: 92KB