c7445f207aaf06ffa83d6d2a4d3169ba5ee89f93b6a00448ab3171d3dd49a7ff

Sharing

Copy URL Twitter E-mail

General

Target

c7445f207aaf06ffa83d6d2a4d3169ba5ee89f93b6a00448ab3171d3dd49a7ff
Size

80KB
MD5

12059e0645abe4725178436607150c7b
SHA1

84659fd931878c190057dd96b9bbd76b68aee7df
SHA256

c7445f207aaf06ffa83d6d2a4d3169ba5ee89f93b6a00448ab3171d3dd49a7ff
SHA512

5704694697bd0cd4f1403eae3f9e0564d9e535ae0900426e7f71115578f5b50dccc2d45df33c0fb325bb5573aa60bda16dbc1b65579dca43e21b34a538e83670
SSDEEP

1536:eyFGSpwxWAatQxMgxx+2tSKfdCWx6BhphlAWvIJK5IdAm2G8Gz4M:ei9Qagi2t76u6ISc4M

Score

N/A

Malware Config

Signatures

Files

c7445f207aaf06ffa83d6d2a4d3169ba5ee89f93b6a00448ab3171d3dd49a7ff
.exe windows x86

74b9191aeed23cbc7d369204a487e23d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

GetUserNameA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

kernel32

CloseHandle
CopyFileA
CreateFileA
CreateMutexA
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetComputerNameA
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemDirectoryA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalMemoryStatus
HeapAlloc
HeapFree
InitializeCriticalSection
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
RaiseException
ReadFile
ReleaseMutex
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
SetLastError
SetThreadLocale
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
WritePrivateProfileStringA
_lclose
_llseek
_lopen
_lread

wsock32

WSACleanup
WSAGetLastError
WSAStartup
__WSAFDIsSet
closesocket
connect
gethostbyname
htons
inet_addr
recv
select
send
setsockopt
socket

user32

CreateWindowExA
DefWindowProcA
DispatchMessageA
EnumThreadWindows
GetClassNameA
GetDesktopWindow
GetForegroundWindow
GetMessageA
GetWindow
GetWindowLongA
GetWindowTextA
KillTimer
MessageBoxA
PeekMessageA
PostQuitMessage
RegisterClassA
SendMessageA
SetTimer
TranslateMessage
wsprintfA

Exports

Exports

__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cas
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74b9191aeed23cbc7d369204a487e23d

Headers

File Characteristics

Imports

advapi32

kernel32

wsock32

user32

Exports

Exports

Sections

.text Size: 59KB - Virtual size: 60KB

.data Size: 12KB - Virtual size: 48KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: - Virtual size: 4KB

.cas Size: 1KB - Virtual size: 4KB

.text
Size: 59KB - Virtual size: 60KB

.data
Size: 12KB - Virtual size: 48KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: - Virtual size: 4KB

.cas
Size: 1KB - Virtual size: 4KB