cc4de86c8f3eac4e6af3e8badb766c0fcc4315a46996aa7aa3cb90fca13e489f

General

Target

cc4de86c8f3eac4e6af3e8badb766c0fcc4315a46996aa7aa3cb90fca13e489f
Size

79KB
MD5

b526789c58dec9466fe9b3cca38042ee
SHA1

355822a3be182e24d07f51bba0a4f24634b05007
SHA256

cc4de86c8f3eac4e6af3e8badb766c0fcc4315a46996aa7aa3cb90fca13e489f
SHA512

e8ebe4497ca738c889872ee1a4940f069f906e5db93e242b2c7e63535e0d743c888b1d1700bdf2739b2b4dfc3c831cce71cd70af524142c388df18ef8900961d
SSDEEP

1536:4wnKOC2s/dYAhBrGAmQv0BkJdSFnToIfTOopS:dnKOClYAhBrJv0Bk6tTBfTOopS

Score

N/A

Malware Config

Signatures

Files

cc4de86c8f3eac4e6af3e8badb766c0fcc4315a46996aa7aa3cb90fca13e489f
.exe windows x86

f80be00f8fee1d899538f3c9c5b1dbd3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetCurrentDirectoryA
GetTempPathA
Sleep
FreeResource
SizeofResource
LoadResource
FindResourceA
GetSystemDirectoryA
ExitProcess
WaitForSingleObject
CreateRemoteThread
LoadLibraryA
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
lstrlenA
OpenProcess
CreateProcessA
MoveFileA
DeleteFileA
GetCurrentThreadId
GetModuleHandleA
GetStartupInfoA
GetProcAddress
lstrcmpiA
GetVersionExA
GetCurrentProcess
GetSystemInfo

user32

PostMessageA
GetMessageA
SetProcessWindowStation
OpenDesktopA
SetThreadDesktop
PostThreadMessageA
GetInputState
OpenWindowStationA
wsprintfA
GetSystemMetrics
FindWindowA

advapi32

RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey

shell32

ShellExecuteA

msvcrt

_strrev
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_controlfp
_stricmp
_except_handler3
__setusermatherr
_initterm
memset
sprintf
strlen
rename
_exit
_XcptFilter
exit
_acmdln
__getmainargs

psapi

GetModuleBaseNameA
EnumProcesses
EnumProcessModules

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f80be00f8fee1d899538f3c9c5b1dbd3

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

msvcrt

psapi

Sections

.text Size: 9KB - Virtual size: 9KB

.rsrc Size: 69KB - Virtual size: 68KB

.text
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 69KB - Virtual size: 68KB