bccb8815a219ce891f05a2a936e1b7b291a4e8a180e11da6d92759c08df9a68d

Sharing

Copy URL Twitter E-mail

General

Target

bccb8815a219ce891f05a2a936e1b7b291a4e8a180e11da6d92759c08df9a68d
Size

197KB
MD5

2bd10766d1543b4384fe30a8cbfb44b9
SHA1

102649ce575e20126ecfa615939473f1dcd58b95
SHA256

bccb8815a219ce891f05a2a936e1b7b291a4e8a180e11da6d92759c08df9a68d
SHA512

097c1470abd92f7a2d9a56e76270fdec0360428735023babd1acc359401cfc01623a94053348906ec4b6b7c5d88574424c5f7efb3bb1f27b3a9f91358edbeb9a
SSDEEP

3072:WfZzPrBCWSl7IJik0Lp8LVNnYa2+HBuFa1ZXGaH+oYUW+4NoaeJ:yvSyJB6ow+Z1xNHAreJ

Score

N/A

Malware Config

Signatures

Files

bccb8815a219ce891f05a2a936e1b7b291a4e8a180e11da6d92759c08df9a68d
.exe windows x86

94b14027f3b842d8c2054e375a71b5b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

kernel32

AddAtomA
CloseHandle
CreateFileA
DeviceIoControl
ExitProcess
FindAtomA
FreeLibrary
GetAtomNameA
GetDriveTypeA
GetFileSize
GetLastError
GetLogicalDriveStringsA
GetModuleFileNameA
GetProcAddress
GlobalMemoryStatusEx
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
ReadFile
SetEndOfFile
SetFilePointer
SetUnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteFile

msvcrt

_access
_close
_fstat
_itoa
_lseek
_memicmp
_mkdir
_open
_read
_setmode
_strcmpi
_strdup
_stricmp
_strupr
_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
_stricmp
abort
atexit
atof
atoi
exit
fclose
fflush
fgets
fopen
fprintf
fputc
free
fwrite
getenv
isalnum
localtime
malloc
mbstowcs
memcmp
memcpy
memset
printf
puts
realloc
signal
sprintf
strcat
strchr
strcmp
strcpy
strlen
strncmp
strrchr
strstr
strtok
strtol
strtoul
system
time
toupper
vfprintf
wcstombs

rpcrt4

UuidFromStringA

setupapi

SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiSetClassInstallParamsA

shell32

ShellExecuteA

user32

GetDesktopWindow
MessageBoxA
wsprintfA

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 37KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

94b14027f3b842d8c2054e375a71b5b1

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

rpcrt4

setupapi

shell32

user32

Sections

.text Size: 58KB - Virtual size: 58KB

.data Size: 10KB - Virtual size: 9KB

.rdata Size: 11KB - Virtual size: 10KB

.bss Size: - Virtual size: 37KB

.idata Size: 3KB - Virtual size: 3KB

.rsrc Size: 74KB - Virtual size: 76KB

.text
Size: 58KB - Virtual size: 58KB

.data
Size: 10KB - Virtual size: 9KB

.rdata
Size: 11KB - Virtual size: 10KB

.bss
Size: - Virtual size: 37KB

.idata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 74KB - Virtual size: 76KB