ca94f922497910e19d736958160370547b3996253c0759058ebd977ea79fd29b

Sharing

Copy URL Twitter E-mail

General

Target

ca94f922497910e19d736958160370547b3996253c0759058ebd977ea79fd29b
Size

48KB
MD5

1a5059bcfbd405226c5dbd49e81dddbe
SHA1

9632e7ac36b5def7b35542ec4f6b9ec07906ea31
SHA256

ca94f922497910e19d736958160370547b3996253c0759058ebd977ea79fd29b
SHA512

3c0c5bad32a5f9ed6ba8b44c442325a041eef76737075256ec68b3e2706fd1e75a6794d545243d5802e8ff936b640f4ef7ecf8ad3a0738c27ee2f4ab96cd4246
SSDEEP

768:ruq3iRwK41J2nYiCeM6ZKlwAZ+p3qlcdPIe08t:rFMwEnCeM6ZKKAZ+palut

Score

N/A

Malware Config

Signatures

Files

ca94f922497910e19d736958160370547b3996253c0759058ebd977ea79fd29b
.exe windows x86

4f8cd24c59f6a1d53668f36caea8bcc0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
WriteFile
SizeofResource
CreateFileW
LoadResource
FindResourceW
lstrcpyW
Process32NextW
OpenProcess
lstrcmpW
Process32FirstW
CreateToolhelp32Snapshot
ReadFile
GetModuleFileNameW
ResumeThread
CreateProcessW
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatW
GetTickCount
GetShortPathNameW
Sleep
MoveFileW
DeleteFileW
GetFileAttributesW
GetFileTime
lstrlenW
MultiByteToWideChar
SetFileAttributesW
WinExec
CompareStringW
CompareStringA
FlushFileBuffers
GetStringTypeW
SetFilePointer
CloseHandle
GetEnvironmentVariableW
FreeResource
SetEnvironmentVariableA
GetStringTypeA
LCMapStringW
LCMapStringA
SetStdHandle
LoadLibraryA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
VirtualAlloc
HeapReAlloc
GetLastError
GetCPInfo
GetACP
GetOEMCP
GetProcAddress

user32

SendMessageW
wsprintfA
FindWindowW

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

shell32

ShellExecuteW
SHGetSpecialFolderPathW

psapi

GetModuleFileNameExW

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f8cd24c59f6a1d53668f36caea8bcc0

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

psapi

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 1KB