985218c97f0043ebf4beb53c5b99e0bf9121d11eb8b9c14f3c7d516933c871ca

Sharing

Copy URL Twitter E-mail

General

Target

985218c97f0043ebf4beb53c5b99e0bf9121d11eb8b9c14f3c7d516933c871ca
Size

220KB
MD5

4667619c786f1622c25f20df78509955
SHA1

3b038fddc58dbd3deed69cd2b9a463a091df92d3
SHA256

985218c97f0043ebf4beb53c5b99e0bf9121d11eb8b9c14f3c7d516933c871ca
SHA512

17e94d9933b5c348c47f89b3668e8c43c60496d1b0ebc1a8c6f3c8c4b3d75c965ee813f66e05466b69e1a73ab943a285bfa0c823c2cb8aeca9bebffc0c681e91
SSDEEP

3072:JsUxD+O9hhd6Dtgpj9+G7V1fFz8C+CUNuc1uQnHP2x8H6J3DGqmEK2bB+am:JsWD+O9R6u9fBVf+C5euUHH6J+AUN

Score

N/A

Malware Config

Signatures

Files

985218c97f0043ebf4beb53c5b99e0bf9121d11eb8b9c14f3c7d516933c871ca
.exe windows x86

2717f944f41bd259616c28aa43933200

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
lstrcatA
GetSystemDirectoryA
GetTempPathA
HeapFree
HeapAlloc
GetProcessHeap
FreeResource
LockResource
SetLastError
WideCharToMultiByte
MultiByteToWideChar
ExitProcess
Sleep
DeleteFileA
SwitchToThread
CreateEventA
OpenEventA
GetModuleFileNameA
GetCurrentThreadId
MoveFileExA
MoveFileA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetTickCount
SetFilePointer
GetLastError
FindResourceA
LoadResource
CreateFileA
SizeofResource
WriteFile
CloseHandle
FreeLibrary
LoadLibraryA
GetVersionExA
VirtualAlloc
GetModuleHandleA
GetProcAddress
TerminateProcess
WaitForSingleObject
GetLocaleInfoA
RtlUnwind
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
SetStdHandle
InitializeCriticalSection
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

GetInputState
PostThreadMessageA
GetMessageA
SendMessageTimeoutA
wsprintfA

advapi32

GetAce
GetUserNameA
LookupAccountNameA
GetFileSecurityA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
EqualSid
AddAce
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
SetFileSecurityA

netapi32

NetUserGetLocalGroups
NetApiBufferFree

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2717f944f41bd259616c28aa43933200

Headers

File Characteristics

Imports

kernel32

user32

advapi32

netapi32

Sections

.text Size: 44KB - Virtual size: 40KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 152KB - Virtual size: 148KB

.text
Size: 44KB - Virtual size: 40KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 152KB - Virtual size: 148KB