98b00dca28141e2e6ec20fce898e65eb2dcf693c6a77172238aa29152c12544d

Sharing

Copy URL Twitter E-mail

General

Target

98b00dca28141e2e6ec20fce898e65eb2dcf693c6a77172238aa29152c12544d
Size

100KB
MD5

865e3ef497b5be2ab1240986204d1eb7
SHA1

7924322555e4f7c007686337f4863c136e1a9c6c
SHA256

98b00dca28141e2e6ec20fce898e65eb2dcf693c6a77172238aa29152c12544d
SHA512

08fca8d351efc4db346100908cf515880bc8406c09fad5dacfe10fecaaf47733bbefb61e97b3dc98b0ab15d61e8f91804e8e88c02d02a4e483fa418e74e1559b
SSDEEP

3072:ZJEzl0O3q1EUjZVK0roPvLU8nUf7ugZjsMIp4YTb3qVgHlye1WrmxMqRTd/lK9UQ:ZJEzl0O3q1EUjZVK0roPvLU8nUf7ugZJ

Score

N/A

Malware Config

Signatures

Files

98b00dca28141e2e6ec20fce898e65eb2dcf693c6a77172238aa29152c12544d
.exe windows x86

e21edf78d4b833695a8cece90ec793c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationW
GetDriveTypeW
CreateThread
GetComputerNameW
CreateMutexW
FindClose
GetSystemDirectoryW
GetWindowsDirectoryW
GetCurrentDirectoryW
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetConsoleWindow
CreateIoCompletionPort
InterlockedDecrement
CreateFileW
GetTickCount
GetQueuedCompletionStatus
InterlockedIncrement
GetDiskFreeSpaceW
DeleteFileW
CopyFileW
SetCurrentDirectoryW
SetFileAttributesW
GetSystemDefaultLangID
SetFileTime
RemoveDirectoryW
GetLogicalDriveStringsW
GetVersion
Sleep
DeviceIoControl
UnmapViewOfFile
GetVersionExW
CloseHandle
MapViewOfFile
LocalFree
FreeLibrary
LoadLibraryW
ReadDirectoryChangesW
GetProcAddress

user32

SendMessageW
wsprintfW
LoadIconW
DispatchMessageW
TranslateMessage
GetForegroundWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
DefWindowProcW
PostQuitMessage
GetMessageW
GetWindowTextW

advapi32

SetEntriesInAclW
GetSecurityInfo
GetUserNameW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegDeleteValueW
SetSecurityInfo

shell32

ShellExecuteW

mfc42u

ord356
ord2762
ord2773
ord3173
ord1971
ord3313
ord665
ord5180
ord354
ord3332
ord1165
ord1143
ord3806
ord4053
ord3176
ord561
ord815
ord800
ord2910
ord2810
ord540
ord825
ord823
ord668
ord1972
ord3314

msvcrt

memcpy
_controlfp
_except_handler3
__set_app_type
__p__fmode
memset
wcsstr
wcsncat
fseek
fgetws
wprintf
_wmkdir
exit
wcslen
fwprintf
wcscpy
fclose
_wfopen
wcscat
__CxxFrameHandler
wcsrchr
_endthreadex
_ltoa
wcscmp
wcsncpy
_ltow
printf
swprintf
fwrite
fread
__dllonexit
_onexit
_exit
_XcptFilter
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

msvcp60

??0Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vdceapd
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e21edf78d4b833695a8cece90ec793c4

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

mfc42u

msvcrt

msvcp60

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 14KB

.rsrc Size: 48KB - Virtual size: 48KB

vdceapd Size: - Virtual size: 4KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 14KB

.rsrc
Size: 48KB - Virtual size: 48KB

vdceapd
Size: - Virtual size: 4KB