a3cab388b68f0526dfd34020d9aedd20898f51de96fb0030d4baaaf809e6b43e

Sharing

Copy URL Twitter E-mail

General

Target

a3cab388b68f0526dfd34020d9aedd20898f51de96fb0030d4baaaf809e6b43e
Size

400KB
MD5

12617d537dba49b436989c2c530b1c58
SHA1

ad3a386a1f6c69dcfd30dd610d8b5344caa1db3b
SHA256

a3cab388b68f0526dfd34020d9aedd20898f51de96fb0030d4baaaf809e6b43e
SHA512

23eb3728cd45e6de3a49ce182a4ecf055a4dd4fd8331c4f33958e38d11d15d923c925b57625fb18a4acfc4961031e8a141b435ab0731dab8f9592437d498ae09
SSDEEP

6144:sTqvzRk68U5MVABH891PvFm8BMYES1ynnrvRKSVh136wE:s2VX5MVX91XFZW3S1ynnrvY833

Score

N/A

Malware Config

Signatures

Files

a3cab388b68f0526dfd34020d9aedd20898f51de96fb0030d4baaaf809e6b43e
.exe windows x86

fe20e35ff10a90519692bb3402ad6a8f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringW
CreateDirectoryW
CreateEventW
CreateFileW
CreateMutexW
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
EnterCriticalSection
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDriveTypeW
GetExitCodeProcess
GetExitCodeThread
GetFileSize
GetFileTime
GetFileType
GetLocalTime
GetLocaleInfoW
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetUserDefaultLangID
GetVersionExW
GetVolumeInformationW
CompareStringA
GlobalFree
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LoadLibraryExW
LocalFree
MapViewOfFile
MoveFileW
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
ReleaseMutex
RemoveDirectoryW
ResetEvent
SetEndOfFile
SetEvent
SetFileAttributesW
SetFilePointer
SetFileTime
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
UnhandledExceptionFilter
UnmapViewOfFile
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpW
lstrcmpiW
lstrcpynW
lstrlenA
lstrlenW
CompareFileTime
GlobalAlloc
CloseHandle

user32

TranslateMessage
SendMessageW
PostMessageW
PeekMessageW
MsgWaitForMultipleObjects
GetWindowThreadProcessId
GetKeyboardType
GetActiveWindow
ExitWindowsEx
DispatchMessageW
CharUpperA
CharNextW
CharLowerA
CharUpperW

shell32

SHGetMalloc
SHGetFolderPathW
SHGetPathFromIDListW
ShellExecuteW
SHBrowseForFolderW

wininet

InternetCrackUrlW
InternetGetConnectedState
InternetQueryOptionA
InternetCanonicalizeUrlW

ole32

CoTaskMemFree
CoUninitialize
HMETAFILE_UserFree
CoTaskMemAlloc
CoInitialize

crypt32

CertGetCertificateContextProperty
CryptHashPublicKeyInfo

setupapi

SetupScanFileQueueW
SetupOpenInfFileW
SetupOpenFileQueue
SetupGetStringFieldW
SetupFindFirstLineW
SetupDiSetSelectedDriverW
SetupDiSetDeviceInstallParamsW
SetupDiOpenDeviceInfoW
SetupDiOpenDevRegKey
SetupDiInstallDriverFiles
SetupDiGetDriverInstallParamsW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInstallParamsW
SetupDiGetClassDevsW
SetupDiEnumDriverInfoW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiCreateDeviceInfoList
SetupDiBuildDriverInfoList
SetupCloseInfFile
SetupCloseFileQueue
CM_Locate_DevNodeW
CM_Get_DevNode_Status
CM_Get_DevNode_Registry_PropertyW

shlwapi

PathIsRootW
PathIsRelativeW
PathFindExtensionW
PathIsUNCW
StrToIntExW
StrStrIW
StrRChrW
PathRemoveBackslashW
PathStripToRootW
StrChrW
StrCmpW
StrCmpIW
UrlGetPartW

oleaut32

VariantInit
VariantClear
VarR8FromI1
SysStringLen
SysFreeString
SysAllocString

Sections

.text
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fe20e35ff10a90519692bb3402ad6a8f

Headers

File Characteristics

Imports

kernel32

user32

shell32

wininet

ole32

crypt32

setupapi

shlwapi

oleaut32

Sections

.text Size: 296KB - Virtual size: 296KB

.rdata Size: 52KB - Virtual size: 52KB

.data Size: 20KB - Virtual size: 104KB

.idata Size: 8KB - Virtual size: 8KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 296KB - Virtual size: 296KB

.rdata
Size: 52KB - Virtual size: 52KB

.data
Size: 20KB - Virtual size: 104KB

.idata
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 20KB - Virtual size: 20KB