af317744ad7d3c46213addbdacea3750e35cbef72bdf970659d55799e9ced021

Sharing

Copy URL Twitter E-mail

General

Target

af317744ad7d3c46213addbdacea3750e35cbef72bdf970659d55799e9ced021
Size

12KB
MD5

45342b903b01ca9f90be28f0b5c1223b
SHA1

212b36dd6e9d792e8d63b6011b06e80e9cf187e6
SHA256

af317744ad7d3c46213addbdacea3750e35cbef72bdf970659d55799e9ced021
SHA512

ce0a58dddf57c789beb241c8d2933ef56cb2d0fb2f301f31120db4b574b57dd5ebfa78d9e0b57fdb23290c29358454414bff3cb47c829927e1eaf5eb11284dec
SSDEEP

192:ESpqk0iE0sFw5gJ7kQtjhY+Gm5C6meZJPYvlcAbvzJQhbjpBS1mbDAVlDR:Eev0iVW7kQtjO/moeZpYv72

Score

N/A

Malware Config

Signatures

Files

af317744ad7d3c46213addbdacea3750e35cbef72bdf970659d55799e9ced021
.exe windows x86

5c2d88e87f9d606d6641832a1571a90b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
GetTempFileNameA
GetTempPathA
CloseHandle
GetFileSize
WriteFile
CreateFileA
DeleteFileA
FreeLibrary
GetLastError
lstrcatA
CreateThread
WinExec
CreateMutexA
GetVersionExA
lstrcmpiA
SetFileAttributesA
Sleep
GetTickCount
ReadFile
SetFilePointer
CopyFileA
LoadLibraryA
GetProcAddress
GetCurrentProcess
WaitForSingleObject

user32

FindWindowA
wsprintfA

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
RegCloseKey
RegSetValueExA
RegCreateKeyA
OpenProcessToken

wininet

DeleteUrlCacheEntry

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?getline@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z

shell32

ShellExecuteA

msvcrt

strchr
_onexit
__dllonexit
fopen
fwrite
fclose
fread
atoi
__CxxFrameHandler
strlen
memcpy
memset
malloc
_itoa
strcpy
sprintf
strcat
localtime
time

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5c2d88e87f9d606d6641832a1571a90b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

msvcp60

shell32

msvcrt

Sections

.text Size: 10KB - Virtual size: 10KB

.CRT Size: 512B - Virtual size: 8B

.text
Size: 10KB - Virtual size: 10KB

.CRT
Size: 512B - Virtual size: 8B