77b3a38ade1df4d3f8dcf2a3310f869dea98a6e295b518fd0abd4c8610c1e27a

Sharing

Copy URL Twitter E-mail

General

Target

77b3a38ade1df4d3f8dcf2a3310f869dea98a6e295b518fd0abd4c8610c1e27a
Size

84KB
MD5

c156c094bc4974f95d56e1b2a5de916f
SHA1

2fd07455c83eb6a5cb684ed94878e3dc3b6b5db5
SHA256

77b3a38ade1df4d3f8dcf2a3310f869dea98a6e295b518fd0abd4c8610c1e27a
SHA512

127f5b32ba88b26ac55889254c7fa0310f17f1dd64e6b3e5ba4f42af761cb374b11560db324300ae305f3d42bcd5969c438fec01dd5eb4846d0762737ddf4072
SSDEEP

1536:t4Pma6BNzBpfMmS6/yBrpGrK+ofPYam2tJDFxxDRVvh0+MW+f7OxMu+CaVIiI:GwNXqWK+OPmGJ5XtVy/fua63

Score

N/A

Malware Config

Signatures

Files

77b3a38ade1df4d3f8dcf2a3310f869dea98a6e295b518fd0abd4c8610c1e27a
.exe windows x86

7bdd911a1f749abcc8f5991e57f73c71

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFindAtomA
SetFilePointer
DeleteCriticalSection
GetFileSize
LoadLibraryExA
MulDiv
GetModuleHandleA
FreeResource
LockResource
GetStringTypeW
CompareStringA
GetLocalTime
LocalFree
SizeofResource
Sleep
VirtualAllocEx
ExitThread
SetHandleCount
GetCPInfo
LocalAlloc
VirtualAlloc
GetCurrentThread
VirtualQuery
SizeofResource
LoadResource
SetErrorMode
GetCurrentProcess
CompareStringA
GetCommandLineA
LoadLibraryExA
ExitProcess

shell32

SHGetDiskFreeSpaceA
SHGetSpecialFolderLocation
SHGetFolderPathA
SHFileOperationA
SHGetDiskFreeSpaceA
DragQueryFileA
SHGetFileInfoA

shlwapi

SHQueryInfoKeyA

msvcrt

malloc
memset
sprintf
memcpy
wcscspn
swprintf
exit
wcstol
memmove
calloc
mbstowcs
tolower
rand
_acmdln

advapi32

RegEnumKeyA
RegLoadKeyA
RegCreateKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegEnumKeyExA

version

VerInstallFileA
VerQueryValueA
VerFindFileA

user32

IsWindowVisible
EndPaint
GetPropA
DrawIconEx
CreateIcon
GetCursor
DeferWindowPos
GetCapture
FillRect
RegisterClassA
CharLowerA
MessageBoxA
FindWindowA
EnumWindows
GetWindow
EnableScrollBar
ShowScrollBar

ole32

WriteClassStm
CoDisconnectObject
CoGetObjectContext
CoUninitialize
CoTaskMemFree
CLSIDFromProgID
CoRevokeClassObject
CoCreateInstanceEx
CreateStreamOnHGlobal
StgOpenStorage

gdi32

SetPixel
CreatePenIndirect
SetBkColor
CreateBrushIndirect
GetObjectA
GetCurrentPositionEx
SetTextColor
SelectPalette
GetClipBox
GetDIBColorTable

comdlg32

GetFileTitleA
GetOpenFileNameA
FindTextA
GetSaveFileNameA

Sections

.bss
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: 47KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7bdd911a1f749abcc8f5991e57f73c71

Headers

File Characteristics

Imports

kernel32

shell32

shlwapi

msvcrt

advapi32

version

user32

ole32

gdi32

comdlg32

Sections

.bss Size: 24KB - Virtual size: 24KB

BSS Size: 47KB - Virtual size: 70KB

.rdata Size: 6KB - Virtual size: 6KB

INIT Size: 1KB - Virtual size: 1KB

.edata Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 571B

.bss
Size: 24KB - Virtual size: 24KB

BSS
Size: 47KB - Virtual size: 70KB

.rdata
Size: 6KB - Virtual size: 6KB

INIT
Size: 1KB - Virtual size: 1KB

.edata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 571B