7d02b648081f5d2ac5e3f12463affd16928ee964248b4d29c468f004471368b0

Sharing

Copy URL Twitter E-mail

General

Target

7d02b648081f5d2ac5e3f12463affd16928ee964248b4d29c468f004471368b0
Size

73KB
MD5

1aa18bb10f8d6f98adcdb5494df69db0
SHA1

2b6ec37235cb14710675b6d7b87eb3207d1b0ae7
SHA256

7d02b648081f5d2ac5e3f12463affd16928ee964248b4d29c468f004471368b0
SHA512

cc454c8de2dd9c1bb36c4af3361be32b00983d385cb38ccbd42aaf0a799d38c77d42c55733469dcf044e8081c91536622c0ce8117d76427da043a42f07fb85ca
SSDEEP

1536:ahqfwErgVZMHQZVVUNnLBMHQZVVUNWUECK/U:aQfv6ZMHeVVEBMHeVV0E9c

Score

N/A

Malware Config

Signatures

Files

7d02b648081f5d2ac5e3f12463affd16928ee964248b4d29c468f004471368b0
.exe windows x86

09edb245867f28b00c2e1117a1a6caa8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynW
GetCommandLineW
VerSetConditionMask
VerifyVersionInfoW
WriteConsoleW
SetLastError
FreeLibrary
GetConsoleOutputCP
lstrlenW
GetLocaleInfoW
SetStdHandle
SetFilePointer
IsValidCodePage
IsValidLocale
GetUserDefaultLCID
GetLocaleInfoA
VirtualProtect
GetStringTypeW
GetStringTypeA
FlushFileBuffers
RtlUnwind
VirtualAlloc
GetCPInfo
GetACP
LCMapStringW
Sleep
MultiByteToWideChar
VirtualFree
HeapCreate
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
FindNextFileW
GetVersionExA
GetCommandLineA
LocalFree
LocalReAlloc
LocalAlloc
GetModuleHandleA
GetModuleHandleW
CreateThread
WaitForMultipleObjects
GlobalFree
OpenEventW
WaitForSingleObject
CloseHandle
QueryPerformanceCounter
GetSystemInfo
InitializeCriticalSection
GetLastError
InterlockedExchange
TlsSetValue
InterlockedCompareExchange
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
HeapValidate
HeapSize
HeapWalk
HeapUnlock
HeapCompact
HeapFree
HeapReAlloc
HeapAlloc
DisableThreadLibraryCalls
TlsAlloc
GetProcessHeap
TlsFree
FindFirstFileW
GetModuleFileNameA
RemoveDirectoryW

user32

ExitWindowsEx
LoadStringW

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueW

msvcrt

strncmp
exit
fwprintf
mbstowcs
vfwprintf
malloc
fprintf
fgetwc
_getch
vswprintf

shlwapi

wvnsprintfW

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

09edb245867f28b00c2e1117a1a6caa8

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

shlwapi

Sections

.text Size: 17KB - Virtual size: 16KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 21KB - Virtual size: 2.1MB

.rsrc Size: 15KB - Virtual size: 14KB

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 21KB - Virtual size: 2.1MB

.rsrc
Size: 15KB - Virtual size: 14KB