c7cfee0ddcb77d2600c89fbc1fa0091abbde45e10fddb5cc5c0accb60220daaa

Sharing

Copy URL Twitter E-mail

General

Target

c7cfee0ddcb77d2600c89fbc1fa0091abbde45e10fddb5cc5c0accb60220daaa
Size

227KB
MD5

a6f3f79e893d25a8553d615a874c4694
SHA1

8ff61df9d0ebcf83a1c984ce3b568e6b4220f10c
SHA256

c7cfee0ddcb77d2600c89fbc1fa0091abbde45e10fddb5cc5c0accb60220daaa
SHA512

7fe193b7d9cd7daedfbfe9d347376e5d20c47864ea491db971e7835ac8221cabe83dc1abb6369a3bd42292d81a6659fbd502e5871f99fb68b198c3b175be4f45
SSDEEP

3072:KmzHvvjhlmhvfY9FgqvYqR0zaZLwgtFVGhCksszb:KmzPdl8YFLRlZltFV3Hs

Score

N/A

Malware Config

Signatures

Files

c7cfee0ddcb77d2600c89fbc1fa0091abbde45e10fddb5cc5c0accb60220daaa
.exe windows x86

cf40d44f8480e46e612ebe886982ccf6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
SetEvent
SetThreadLocale
Sleep
WaitForMultipleObjects
WideCharToMultiByte
RaiseException
lstrcpyA
lstrlenA
GetStartupInfoA
VirtualAlloc
CreateFileW
GetOEMCP
MultiByteToWideChar
LocalFree
LocalAlloc
LeaveCriticalSection
InterlockedIncrement
InterlockedExchange
HeapReAlloc
HeapAlloc
GetWindowsDirectoryA
GetThreadLocale
FormatMessageW
FormatMessageA
ExitProcess
EnterCriticalSection
WriteFile
CreateEventA

user32

GetSysColor
SetTimer
SetFocus
SendMessageW
PostMessageW
MessageBoxW
MessageBoxA
KillTimer
GetWindowRect
GetDlgItem
CharLowerW
MapDialogRect

gdi32

GetStockObject
GetTextMetricsW
GetTextExtentPointW
CreateDCW
SelectObject
DeleteDC

advapi32

RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegSetValueExW
RegDeleteKeyW
RegCloseKey
RegEnumValueW
GetUserNameW

shlwapi

PathFindFileNameA
PathQuoteSpacesA
PathRemoveFileSpecA
SHGetValueA
SHRegGetBoolUSValueA
StrCpyNW
StrStrIA
wnsprintfA
PathAppendA

msvcrt

_except_handler3
_vsnwprintf
_wmakepath
_wsplitpath
_wtoi
free
malloc
memmove
setlocale
swscanf

Sections

.data8
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data7
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data6
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data5
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cf40d44f8480e46e612ebe886982ccf6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

msvcrt

Sections

.data8 Size: 1024B - Virtual size: 1000B

.data7 Size: 1024B - Virtual size: 1000B

.data6 Size: 1024B - Virtual size: 1000B

.data2 Size: 1024B - Virtual size: 1000B

.text Size: 85KB - Virtual size: 85KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 392B

.data5 Size: 115KB - Virtual size: 114KB

.reloc Size: 19KB - Virtual size: 19KB

.data8
Size: 1024B - Virtual size: 1000B

.data7
Size: 1024B - Virtual size: 1000B

.data6
Size: 1024B - Virtual size: 1000B

.data2
Size: 1024B - Virtual size: 1000B

.text
Size: 85KB - Virtual size: 85KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 392B

.data5
Size: 115KB - Virtual size: 114KB

.reloc
Size: 19KB - Virtual size: 19KB