cf3c7b0abc29d7df9fc258f0f81d3645ef837756b5e94d75365fb0e4808ff5bc

Sharing

Copy URL Twitter E-mail

General

Target

cf3c7b0abc29d7df9fc258f0f81d3645ef837756b5e94d75365fb0e4808ff5bc
Size

72KB
MD5

49cad0454f60c09f3e8b8a68361bfd84
SHA1

58f749d78b6f6798777974a006273ce6680ddf26
SHA256

cf3c7b0abc29d7df9fc258f0f81d3645ef837756b5e94d75365fb0e4808ff5bc
SHA512

467a2ff9f804e09d96be1d0869c0bf38c2be7968593b0fb580f978dcb7dd8952594900d604830b1e8f45eceedbbd5009f0f02ae6368171435f61b69db577f152
SSDEEP

768:u6+I3SEX1J1UzdXNqwQZ+49LtIEPsRSl+xKEtPR2S:u6+Un18THIPsPhtZp

Score

N/A

Malware Config

Signatures

Files

cf3c7b0abc29d7df9fc258f0f81d3645ef837756b5e94d75365fb0e4808ff5bc
.exe windows x86

b6232a1babcffd6f4eef730c7f57b279

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GlobalAlloc
FreeLibrary
GetProcAddress
LoadLibraryW
Sleep
OutputDebugStringW
GetCurrentThreadId
lstrcpyW
ExitProcess
CreateThread
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
MultiByteToWideChar
HeapSize
RtlUnwind
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSection
LoadLibraryA
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType

user32

GetUserObjectInformationW
GetWindowLongW
GetClientRect
SetWindowLongW
PostQuitMessage
DefWindowProcW
RegisterClassExW
CreateWindowExW
ShowWindow
UpdateWindow
EnableWindow
GetMessageW
DispatchMessageW
TranslateMessage
GetClassNameW
CreateDesktopW
CloseWindowStation
OpenInputDesktop
EnumWindows
CloseDesktop
GetProcessWindowStation
GetThreadDesktop
OpenWindowStationW
SetProcessWindowStation
OpenDesktopW
SetThreadDesktop
GetWindowTextW
PostMessageW
EnumChildWindows
RegisterWindowMessageW
SendMessageTimeoutW

ole32

OleSetContainedObject
CoGetClassObject
CoUninitialize
CoInitialize
OleUninitialize
OleInitialize

oleaut32

VariantInit
SysAllocString
VariantClear

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b6232a1babcffd6f4eef730c7f57b279

Headers

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 20KB - Virtual size: 21KB

.rsrc Size: 4KB - Virtual size: 176B

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 20KB - Virtual size: 21KB

.rsrc
Size: 4KB - Virtual size: 176B