f3ab85ff3693219db964fb27141a075bd84c7610f63eb18f3def69c69545806b

Sharing

Copy URL Twitter E-mail

General

Target

f3ab85ff3693219db964fb27141a075bd84c7610f63eb18f3def69c69545806b
Size

176KB
MD5

29952253e6660a63d8f6c6b924fc05a5
SHA1

7c719413b36c176b43d9dc42acb781fca717d22c
SHA256

f3ab85ff3693219db964fb27141a075bd84c7610f63eb18f3def69c69545806b
SHA512

e7330ff306e3775c11e913db5f1fc954c19d80865150fc1931b02fc86806d75230cfeb75a07eb2fd181e8dd05c3df698595043f06b30c2538c913cc49ff65523
SSDEEP

3072:831ltKgfsaY/NNEmlcHTtelP0R4oIgsIFzSasVcc2v9PrHVXyxpKB3:83QGY/HEmlmOP44TUFu9eFpCxpK

Score

N/A

Malware Config

Signatures

Files

f3ab85ff3693219db964fb27141a075bd84c7610f63eb18f3def69c69545806b
.exe windows x86

17f0fc4fceb5d032213bb184aeeee36d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
FindNextFileA
GetCurrentProcess
CreateFileMappingA
GetSystemDirectoryA
Sleep
FindFirstFileA
GetExitCodeProcess
lstrcpynA
GlobalAlloc
CreateProcessA
SetEndOfFile
SetFileAttributesA
GetModuleHandleA
GetCurrentThreadId
GetPrivateProfileStringA
GlobalFree
MapViewOfFile
FindClose
CreateFileA
FreeLibrary
GetTickCount
InterlockedExchange
TerminateProcess
DeleteFileA
GetFileSize
GetStartupInfoA
lstrcatA
GetFileType
CreateDirectoryA
GetCommandLineA
VirtualProtect
GetCurrentProcessId
MoveFileExA
SetFilePointer
GetProcAddress
GetLastError
QueryPerformanceCounter
InterlockedCompareExchange
lstrlenA
GetShortPathNameA
GetSystemTimeAsFileTime
UnhandledExceptionFilter
lstrcpyA
WaitForSingleObject
GetWindowsDirectoryA
RemoveDirectoryA
LoadLibraryA
SetUnhandledExceptionFilter
UnmapViewOfFile
CreateFileW
GetVersionExA

msvcrt

_mbscmp
strtok
malloc
__set_app_type
_initterm
_mbsstr
memmove
_amsg_exit
__p__commode
__p__fmode
?terminate@@YAXXZ
_access
_exit
strstr
exit
_ismbblead
_mbsupr
strchr
_mbsinc
__setusermatherr
_adjust_fdiv
memcpy
_cexit
_XcptFilter
_mbsicmp
_acmdln
_getcwd
_controlfp
_mbschr
__getmainargs
memset

advapi32

EqualSid
RegOpenKeyExA
FreeSid
OpenSCManagerA
RegEnumKeyExA
AllocateAndInitializeSid
RegCloseKey
OpenServiceA
RegDeleteKeyA
ControlService
OpenProcessToken
RegQueryValueExA
DeleteService
RegSetValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA
GetTokenInformation
CloseServiceHandle
RegDeleteValueA

user32

wsprintfA
MessageBoxA
LoadStringA
LoadIconA
FindWindowA
SendMessageA
ExitWindowsEx

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo
SetupDiCallClassInstaller
SetupDiDeleteDeviceInfo

ntdll

RtlUnwind

Sections

.rdata
Size: 3KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17f0fc4fceb5d032213bb184aeeee36d

Headers

File Characteristics

Imports

kernel32

msvcrt

advapi32

user32

setupapi

ntdll

Sections

.rdata Size: 3KB - Virtual size: 18KB

.text Size: 79KB - Virtual size: 79KB

.data Size: 89KB - Virtual size: 1.1MB

.rsrc Size: 3KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 18KB

.text
Size: 79KB - Virtual size: 79KB

.data
Size: 89KB - Virtual size: 1.1MB

.rsrc
Size: 3KB - Virtual size: 3KB