97a042a1fa4c5fc475f69d5c1bd2822eb7c410542a2d676bde8ddd97d1ea43f7[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

97a042a1fa4c5fc475f69d5c1bd2822eb7c410542a2d676bde8ddd97d1ea43f7.exe
Size

80KB
MD5

d2a2333090ea0b8ba558b5dee97e4c96
SHA1

65e6789f9f80a8a31f13e410349ff91bbfe0741d
SHA256

97a042a1fa4c5fc475f69d5c1bd2822eb7c410542a2d676bde8ddd97d1ea43f7
SHA512

82af9a1760b34c94edf3802fad657b256a0db98dd4e6eecf95f7746bb72270ad3eb08dc2ec7cb4d11140e88d83bd40ab5bc8b60fe6c1491e80522fb6c4f98296
SSDEEP

1536:n+B7yQwPnlWUtH4HE8Pr0yk10/K4zwPuiu7XJ0K3Ek538HU:n4hYIUh4k8Pr0yk10/K2wGNJEk538

Score

N/A

Malware Config

Signatures

Files

97a042a1fa4c5fc475f69d5c1bd2822eb7c410542a2d676bde8ddd97d1ea43f7.exe
.exe windows x86

08b98f05a0777c3d0684faeb82615659

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

AllocateAndInitializeSid
CheckTokenMembership
FreeSid
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
GetUserNameW
OpenProcessToken
RegCloseKey
RegCreateKeyA
RegCreateKeyExA
RegCreateKeyExW
RegDeleteKeyA
RegEnumKeyExW
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegSetValueExW
RegSetValueW
SystemFunction036

gdiplus

GdipAlloc
GdipCloneBrush
GdipCloneImage
GdipCreateBitmapFromScan0
GdipCreateFont
GdipCreateFontFamilyFromName
GdipCreateLineBrushFromRectI
GdipCreateStringFormat
GdipDeleteBrush
GdipDeleteFont
GdipDeleteFontFamily
GdipDeleteGraphics
GdipDeleteStringFormat
GdipDisposeImage
GdipDrawString
GdipFree
GdipGetImageGraphicsContext
GdipGraphicsClear
GdipSaveImageToFile
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdiplusStartup

kernel32

AttachConsole
CloseHandle
CreateFileW
CreateMutexA
CreateProcessW
CreateThread
CreateToolhelp32Snapshot
DeleteFileW
EnterCriticalSection
ExitProcess
ExitThread
GetCommandLineW
GetComputerNameW
GetCurrentProcess
GetDriveTypeW
GetEnvironmentVariableW
GetExitCodeProcess
GetExitCodeThread
GetFileSize
GetFileSizeEx
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetShortPathNameW
GetStdHandle
GetSystemTimeAsFileTime
GetTempPathW
GetTickCount
GetUserDefaultUILanguage
GetVersionExW
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MoveFileExW
MultiByteToWideChar
OpenProcess
Process32First
Process32Next
ReadFile
ReleaseMutex
SetFileAttributesW
SetFilePointerEx
SleepEx
TerminateProcess
TerminateThread
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrlenA
lstrlenW

ole32

CoCreateInstance
CoInitialize

shell32

CommandLineToArgvW
SHChangeNotify
SHGetFolderPathW
ShellExecuteExW
ShellExecuteW
StrChrA
StrRChrW
StrStrA
StrStrIW

user32

GetForegroundWindow
GetKeyboardLayoutList
GetSystemMetrics
SystemParametersInfoW

winhttp

WinHttpAddRequestHeaders
WinHttpCloseHandle
WinHttpConnect
WinHttpOpen
WinHttpOpenRequest
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest

ws2_32

WSAStartup
closesocket
connect
freeaddrinfo
getaddrinfo
getsockopt
htons
recv
send
sendto
socket

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 161B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

08b98f05a0777c3d0684faeb82615659

Headers

File Characteristics

Imports

advapi32

gdiplus

kernel32

ole32

shell32

user32

winhttp

ws2_32

Sections

.text Size: 48KB - Virtual size: 47KB

.data Size: 22KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 3KB

.bss Size: - Virtual size: 161B

.idata Size: 4KB - Virtual size: 4KB

.text
Size: 48KB - Virtual size: 47KB

.data
Size: 22KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 3KB

.bss
Size: - Virtual size: 161B

.idata
Size: 4KB - Virtual size: 4KB