fd79be8ae95e030daf7faddd73ce4feffb62a9c65fe4ef7d92e874de6b8b2dba

Sharing

Copy URL Twitter E-mail

General

Target

fd79be8ae95e030daf7faddd73ce4feffb62a9c65fe4ef7d92e874de6b8b2dba
Size

56KB
MD5

1a6676775d238249b3111d0364a7c8ea
SHA1

f0f6d64841383d9effb6a99ace794d2b1e48ab24
SHA256

fd79be8ae95e030daf7faddd73ce4feffb62a9c65fe4ef7d92e874de6b8b2dba
SHA512

2922aee4b11aaf177a289f7e8ed2fa1fd772ecb754d1c7d48d7ad675b9e78fab766e597e0c20c7c840c914528cbaffd20733ce657376b938f13fbcbb81360278
SSDEEP

768:31kzkZjmyzs+9S3uDbyQEm7qT9vA73GbZXxFMOP+VrrcwIIDiScDHletoQJ:lyomyzm3D+7Q1I2NXsOOrr2AiktJJ

Score

N/A

Malware Config

Signatures

Files

fd79be8ae95e030daf7faddd73ce4feffb62a9c65fe4ef7d92e874de6b8b2dba
.exe windows x86

fbbd305e0a094499af126aef16c42401

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadProcessMemory
DeleteFileW
ReadFile
GetFileSize
CreateFileW
GetProcessTimes
SystemTimeToFileTime
GetSystemTime
GetVersionExA
CreateProcessW
GetTempFileNameW
GetTempPathW
GetLastError
ReleaseMutex
CreateMutexA
OpenProcess
GetExitCodeThread
WaitForSingleObject
GetModuleHandleA
lstrlenA
DuplicateHandle
GetCurrentProcess
VirtualFreeEx
VirtualAllocEx
WriteProcessMemory
CompareStringW
CompareStringA
SetEndOfFile
SetFilePointer
IsBadCodePtr
FreeLibrary
CloseHandle
LoadLibraryA
CreateRemoteThread
GetProcAddress
IsBadReadPtr
SetUnhandledExceptionFilter
CreateFileA
FlushFileBuffers
SetStdHandle
GetTimeZoneInformation
GetLocalTime
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
HeapAlloc
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA

user32

KillTimer
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA

advapi32

RegQueryInfoKeyA
RegEnumValueW
RegCloseKey
RegOpenKeyExW

shell32

SHGetSpecialFolderPathW
SHGetSpecialFolderPathA

urlmon

UrlMkGetSessionOption

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fbbd305e0a094499af126aef16c42401

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

urlmon

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 4KB - Virtual size: 1KB