cd5e07a18f324aecf1ce78d75126bb03336a958f8312f988ac851fae1dbecb5b

Sharing

Copy URL Twitter E-mail

General

Target

cd5e07a18f324aecf1ce78d75126bb03336a958f8312f988ac851fae1dbecb5b
Size

336KB
MD5

72e1dfe83033869c823d4a750363579c
SHA1

f73116e85993d95abc3b2792b7ab3df6d53a3ee8
SHA256

cd5e07a18f324aecf1ce78d75126bb03336a958f8312f988ac851fae1dbecb5b
SHA512

577ac714930634627b5f347f0738eb8df9ad3e28da09b7a3045204fcd1427fc69e276643638f3614055198ff2b2991b772d9848d036a516a653fc301c8ed93f4
SSDEEP

3072:nlMrzUsY0JgMFkkWBfk3JsbXU6Ko+VlxPJ8JGrq6e1nu5cdUMp+1XsoCpeQG1Awd:nlMrzUsY5MFbWmpCt7sOMcvQQz6al1p2

Score

N/A

Malware Config

Signatures

Files

cd5e07a18f324aecf1ce78d75126bb03336a958f8312f988ac851fae1dbecb5b
.exe windows x86

87e2be38e38541b503776f2d1d46adaa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WaitForSingleObject
CreateProcessA
SetEvent
GetFileAttributesA
GetTimeFormatA
GetDateFormatA
GetLocalTime
GetStartupInfoA
QueryDosDeviceA
SetFileAttributesA
EnterCriticalSection
CreateEventA
LeaveCriticalSection
ResetEvent
FreeLibrary
LoadLibraryA
GetProcAddress
IsBadWritePtr
DeleteCriticalSection
InitializeCriticalSection
CreateFileA
DeleteFileA
GetModuleHandleA
GetVolumeInformationA
SearchPathA
GetCurrentProcess
GetLastError
GetSystemDirectoryA
GetVersionExA
lstrcmpiA
GetDriveTypeA
GetUserDefaultLangID
GetModuleFileNameA
DeviceIoControl

user32

LoadStringA
EndDialog
ExitWindowsEx
CheckDlgButton
ShowWindow
SetWindowTextA
DialogBoxParamA
IsDlgButtonChecked
EnableWindow
GetDlgItem
SetWindowPos
MessageBoxA
wsprintfA

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumKeyA
RegDeleteValueA
RegEnumKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

shell32

ShellExecuteExA

comdlg32

GetOpenFileNameA

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
strlen
free
memset
strcpy
malloc
memcpy
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
_CxxThrowException
strcat
strrchr
strstr
strcmp
strchr
_itoa
_splitpath
atoi
_strnicmp
_stricmp
strncpy
strncmp
_purecall
strtok
toupper
??1type_info@@UAE@XZ
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

winmm

timeGetTime

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ardata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

87e2be38e38541b503776f2d1d46adaa

Headers

File Characteristics

Imports

kernel32

user32

advapi32

version

shell32

comdlg32

msvcrt

winmm

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 13KB

.rsrc Size: 228KB - Virtual size: 226KB

.ardata Size: 68KB - Virtual size: 68KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 13KB

.rsrc
Size: 228KB - Virtual size: 226KB

.ardata
Size: 68KB - Virtual size: 68KB