b07f7b097120a57df94e98c250cc9586551027985accd7fcd9feff127dfb32b4

Sharing

Copy URL Twitter E-mail

General

Target

b07f7b097120a57df94e98c250cc9586551027985accd7fcd9feff127dfb32b4
Size

776KB
MD5

eb79db5521e24987f3844ac039d9d451
SHA1

03aacded90cacd907691ec8a8951686a61d20270
SHA256

b07f7b097120a57df94e98c250cc9586551027985accd7fcd9feff127dfb32b4
SHA512

f37b5abc66fe8f278e61016fbafd3c89dacbc60e53dfef07c64aef158f8176e1eb5f690a329f65e26bd11ec07068d27ec1e22ebc170ed3b7c334c0ff16852e87
SSDEEP

24576:tCQNRLbPKr5A8680ziEPAwjGLYbTen1S:t7zw54LKQTen1S

Score

N/A

Malware Config

Signatures

Files

b07f7b097120a57df94e98c250cc9586551027985accd7fcd9feff127dfb32b4
.exe windows x86

36a661dd390c8e87ac1f801b8839b38d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
GetModuleHandleA
GetProcAddress
VirtualProtect

user32

GetKeyboardType
MessageBoxA

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

winmm

waveInUnprepareHeader

avicap32

capGetDriverDescriptionA

msvfw32

DrawDibDraw

wsock32

WSACleanup

urlmon

URLDownloadToFileA

Sections

CODE
Size: 589KB - Virtual size: 589KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qw0
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qw1
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.qw2
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Q
Size: 70B - Virtual size: 70B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Q
Size: 20B - Virtual size: 20B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Q
Size: 40B - Virtual size: 40B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qw0
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

36a661dd390c8e87ac1f801b8839b38d

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

gdi32

comctl32

shell32

winmm

avicap32

msvfw32

wsock32

urlmon

Sections

CODE Size: 589KB - Virtual size: 589KB

DATA Size: 21KB - Virtual size: 20KB

BSS Size: - Virtual size: 4KB

.idata Size: 11KB - Virtual size: 10KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.qw0 Size: 38KB - Virtual size: 38KB

.rsrc Size: 34KB - Virtual size: 34KB

.qw1 Size: 5KB - Virtual size: 5KB

.qw2 Size: 60KB - Virtual size: 60KB

Q Size: 70B - Virtual size: 70B

Q Size: 20B - Virtual size: 20B

Q Size: 40B - Virtual size: 40B

.qw0 Size: 14KB - Virtual size: 14KB

CODE
Size: 589KB - Virtual size: 589KB

DATA
Size: 21KB - Virtual size: 20KB

BSS
Size: - Virtual size: 4KB

.idata
Size: 11KB - Virtual size: 10KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.qw0
Size: 38KB - Virtual size: 38KB

.rsrc
Size: 34KB - Virtual size: 34KB

.qw1
Size: 5KB - Virtual size: 5KB

.qw2
Size: 60KB - Virtual size: 60KB

Q
Size: 70B - Virtual size: 70B

Q
Size: 20B - Virtual size: 20B

Q
Size: 40B - Virtual size: 40B

.qw0
Size: 14KB - Virtual size: 14KB