f4ccfab4ba94e40240e469262e7c561876d2cd025ae89decb4171eddcccafa28

Sharing

Copy URL

Twitter E-mail

General

Target

f4ccfab4ba94e40240e469262e7c561876d2cd025ae89decb4171eddcccafa28
Size

67KB
MD5

10c23ec0de54a3ad228e25d5c97ad510
SHA1

62d8701d9fdf6d65a9b4575b4e90ee68261f59b0
SHA256

f4ccfab4ba94e40240e469262e7c561876d2cd025ae89decb4171eddcccafa28
SHA512

96654199549eb5d7d7d44c1841759cfe7593ea55e207d5cce8bcbaba00ef2527ca63db08ea7cdf477b755500041c5a7662f0977f796a3a84eecf761af2b95402
SSDEEP

768:+Nt3A3M/z/z5yvGyfUG5f02p/7DNtoL5ehRNS1oFKBM4kRu+AeDIdFZj9TjFCQQ9:g3AczqZPNtodXmBQjTJCNigP0jDt4EBk

Score

N/A

Malware Config

Signatures

Files

f4ccfab4ba94e40240e469262e7c561876d2cd025ae89decb4171eddcccafa28
.exe windows x86

6f9df042a8a9b3a72c7ce0ce9fec0760

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
GetCurrentProcess
HeapFree
VirtualFree
GetProcessHeap
IsBadReadPtr
GetWindowsDirectoryA
WriteFile
GetVolumeInformationA
CreateProcessA
ReadFile
GetModuleFileNameW
GetSystemDirectoryA
MultiByteToWideChar
InterlockedIncrement
FindFirstFileA
GetLastError
GetProcAddress
VirtualAlloc
FindClose
LoadLibraryA
FindNextFileA
GetModuleHandleA
CreateMutexA
VirtualProtect
CloseHandle
DeleteFileA
CreateProcessW
HeapAlloc
FreeLibrary
SetFilePointer
GetFileSize
CreateFileA
HeapReAlloc
GetComputerNameA
CreateDirectoryA
ExitProcess

urlmon

CreateURLMoniker
CoInternetGetSession
RegisterBindStatusCallback
CreateAsyncBindCtx
URLDownloadToCacheFileA

comctl32

ord17

user32

CreateWindowExA
GetWindowLongA
MessageBoxA
SetWindowLongA
TranslateMessage
GetClientRect
DefWindowProcA
PostQuitMessage
RegisterClassExA
GetMessageA
DestroyWindow
DispatchMessageW
ShowWindow
GetSystemMetrics
LoadIconA
UpdateWindow

advapi32

RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc

ole32

CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
OleSetContainedObject
CoInitialize
OleCreate

oleaut32

SysFreeString
SysAllocString

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f9df042a8a9b3a72c7ce0ce9fec0760

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

urlmon

comctl32

user32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 6KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 448B

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 6KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 448B