4bba52cd64744a518927e2754c67cdc5d5023cdad41fb7029873f05010a491c6

Sharing

Copy URL Twitter E-mail

General

Target

4bba52cd64744a518927e2754c67cdc5d5023cdad41fb7029873f05010a491c6
Size

398KB
MD5

0fe02ecb7371ba43b1ccc40c806e4d96
SHA1

0d8622b2ea96ef07678b23426355b5f3e552d471
SHA256

4bba52cd64744a518927e2754c67cdc5d5023cdad41fb7029873f05010a491c6
SHA512

dd92cb25c5060d2c9c8bfc364b028dd996c5d7aecf12c7cc2cd154b1a5b14fddf87f4bd9f0f8aaa34d8bc3d62d2cce6fa9537d9e3e67e9692b6e055a652c06d2
SSDEEP

6144:av7p9hLv4xK6BOaXPDp3Zgc+ockQhtUDeX0+ypLodaQwoDkU:MdLv6NXPD3V+LklDCypUdtwoV

Score

N/A

Malware Config

Signatures

Files

4bba52cd64744a518927e2754c67cdc5d5023cdad41fb7029873f05010a491c6
.exe windows x86

0da089fd6987158380c210589076c162

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
WaitForSingleObject
SetEvent
FreeLibrary
CloseHandle
Sleep
DeleteCriticalSection
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetLastError
ResetEvent
GetTickCount
InterlockedExchange
CancelIo
GetLocalTime
GetCurrentProcessId
DeleteFileA
CreateDirectoryA
GetFileAttributesA
lstrcpyA
lstrlenA
GetDriveTypeA
GetDiskFreeSpaceExA
GetVolumeInformationA
GetLogicalDriveStringsA
FindClose
LocalFree
LocalReAlloc
LocalAlloc
GetFileSize
ReadFile
SetFilePointer
MoveFileA
lstrcatA
CreateProcessA
InitializeCriticalSection
lstrcmpiA
MapViewOfFile
CreateFileMappingA
HeapFree
UnmapViewOfFile
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GetStartupInfoA
WaitForMultipleObjects
LocalSize
TerminateProcess
OpenProcess
GetCurrentThreadId
GetSystemInfo
GetComputerNameA
GetVersionExA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcess
HeapAlloc
GetProcessHeap
InterlockedDecrement
OpenEventA
SetErrorMode
MultiByteToWideChar
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
lstrlenW
SetEnvironmentVariableA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
LCMapStringW
RtlUnwind
RaiseException
CreateThread
TlsSetValue
TlsGetValue
ExitThread
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
TlsAlloc
TlsFree
SetLastError
GetCurrentThread
FatalAppExitA
SetUnhandledExceptionFilter
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
HeapReAlloc
IsBadWritePtr
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
IsBadReadPtr
IsBadCodePtr
InterlockedIncrement
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetStdHandle
SetConsoleCtrlHandler
LCMapStringA
CompareStringW

ole32

CoCreateInstance
OleRun
CLSIDFromString
CoInitialize
CoUninitialize
CLSIDFromProgID

oleaut32

VariantClear
SysFreeString
SysAllocString
GetErrorInfo
SetErrorInfo
VariantInit
VariantChangeType
CreateErrorInfo

Sections

.text
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0da089fd6987158380c210589076c162

Headers

File Characteristics

Imports

kernel32

ole32

oleaut32

Sections

.text Size: 166KB - Virtual size: 166KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 25KB - Virtual size: 34KB

.rsrc Size: 186KB - Virtual size: 186KB

������ Size: 1KB - Virtual size: 1KB

.text
Size: 166KB - Virtual size: 166KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 25KB - Virtual size: 34KB

.rsrc
Size: 186KB - Virtual size: 186KB

��
Size: 1KB - Virtual size: 1KB