7d8038faea8eeff78e83cafdf3b982f0a47e44f0c9d05b94e7f2a28909177b1d

Sharing

Copy URL Twitter E-mail

General

Target

7d8038faea8eeff78e83cafdf3b982f0a47e44f0c9d05b94e7f2a28909177b1d
Size

173KB
MD5

b9d9ca86cfe6b1d9eb089b2a6d27e883
SHA1

e0ce1a4db0b9fe53488f05815f208703e829e31c
SHA256

7d8038faea8eeff78e83cafdf3b982f0a47e44f0c9d05b94e7f2a28909177b1d
SHA512

336c5581508edc3bd60be1c0c605ee7ac66004b9b6c0a196e0e06eadff637548c85ae102d206504bbaf56c73e47b37e97e0652274ec20f992674152fb7fb876a
SSDEEP

3072:tKsqbveNSaSUt0E7u5xz+Z3y206ksiW1GfmSVRIFabpdfYaUB4:+2SU0XwkAobIOvtUB

Score

N/A

Malware Config

Signatures

Files

7d8038faea8eeff78e83cafdf3b982f0a47e44f0c9d05b94e7f2a28909177b1d
.exe windows x86

b98e2ac8d8d5837f5edf19f3d51b992a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysStringLen
SysFreeString
VariantChangeTypeEx
SysReAllocStringLen
VariantClear
SysAllocStringLen
VariantCopyInd

kernel32

GetEnvironmentStringsA
HeapAlloc
TlsAlloc
InitializeCriticalSection
GlobalReAlloc
FreeResource
SetLastError
GetModuleFileNameA
SetThreadLocale
GetTickCount
SetFilePointer
GlobalDeleteAtom
FindClose
GetFileType
DeleteFileA
RaiseException
lstrlenA
LoadResource
FindResourceA
lstrcmpA
FormatMessageA
GlobalAddAtomA
VirtualAlloc
GetStdHandle
TlsFree
GlobalAlloc
DeleteCriticalSection
TlsSetValue
GetLocaleInfoA
GetWindowsDirectoryA
EnterCriticalSection
RtlUnwind
VirtualFree
SetEvent
GetACP
FreeLibrary
SetEndOfFile
ExitProcess
WideCharToMultiByte
LocalAlloc
GetVersion
GetStartupInfoA
GetLastError
GlobalFree
CreateThread
lstrcpyA
WaitForSingleObject
InterlockedDecrement
LockResource
GetVersionExA
GlobalLock
CreateFileA
lstrcpynA
WriteFile
GetOEMCP
SetErrorMode
TlsGetValue
GetSystemDirectoryA
LoadLibraryExA
GetCommandLineA
GlobalHandle
GetModuleHandleA
LoadLibraryA
GetProcessHeap
GetFileSize
VirtualQuery
GetPrivateProfileStringA
MultiByteToWideChar
GetLocalTime
GlobalUnlock
FindFirstFileA
MulDiv
ReadFile
WinExec
GetDiskFreeSpaceA
GetCurrentProcess
SetConsoleCtrlHandler
InterlockedIncrement
GetStringTypeW
CompareStringA
UnhandledExceptionFilter
CreateEventA
GetCurrentThreadId
SetHandleCount
LeaveCriticalSection
EnumCalendarInfoA
CloseHandle
GetProcAddress
GetCPInfo
GetSystemInfo
GetThreadLocale
HeapFree
LocalFree
Sleep
SizeofResource

advapi32

RegOpenKeyA
RegDeleteValueA
LookupPrivilegeValueA
RegDeleteKeyA
RegQueryValueExA
OpenProcessToken
AdjustTokenPrivileges
RegCloseKey
RegOpenKeyExA

ole32

IsEqualGUID

Sections

.text
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b98e2ac8d8d5837f5edf19f3d51b992a

Headers

File Characteristics

Imports

oleaut32

kernel32

advapi32

ole32

Sections

.text Size: 145KB - Virtual size: 144KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 17KB - Virtual size: 17KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 145KB - Virtual size: 144KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 17KB - Virtual size: 17KB

.rsrc
Size: 2KB - Virtual size: 1KB