88c41f6fcb61ebe0dfeea12bdccabbbb398d189c413914d9bb3e3e65edd8c47b

Sharing

Copy URL Twitter E-mail

General

Target

88c41f6fcb61ebe0dfeea12bdccabbbb398d189c413914d9bb3e3e65edd8c47b
Size

8KB
MD5

08a4104677a091cd29c7c35711b48f37
SHA1

154518280de143fab11581e52047256612cd8675
SHA256

88c41f6fcb61ebe0dfeea12bdccabbbb398d189c413914d9bb3e3e65edd8c47b
SHA512

6ca667c4993b2c489ce2dc31df3b5e9ae56228c0f0bbd7f31cdbab438cfa8911a4b9ee8385ad1e5e1faa19c7d1c5cb0f49e66e6e2471ad04a0a13d0dcd17296d
SSDEEP

192:Ez/wEpFj++wsMICux8/+7B+HcJ4VcJ4iNvoyn0H74x+on:Ez/P/KICL+TOyOil6H7m

Score

N/A

Malware Config

Signatures

Files

88c41f6fcb61ebe0dfeea12bdccabbbb398d189c413914d9bb3e3e65edd8c47b
.exe windows x86

837fbed30bde53eefb04ef05582cbbb8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
fread
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__p___winitenv
_XcptFilter
_exit
exit
iswctype
wcstol
_wfopen
fseek
ftell
__p__commode
_wcsicmp

shlwapi

PathIsContentTypeA
SHEnumValueW
StrNCatW
SHRegQueryUSValueW
SHQueryValueExA
StrCmpNA
PathRenameExtensionA
PathGetCharTypeW
StrFromTimeIntervalW
StrCpyW

kernel32

WriteConsoleW
GetProcessHeap
VirtualAlloc
Sleep
GetTickCount
GetConsoleWindow
lstrcmpW
TerminateProcess
OpenProcess
CloseHandle
HeapReAlloc
FormatMessageW
GetStdHandle
GetOEMCP
WideCharToMultiByte
HeapAlloc
WriteFile
GetModuleHandleW
GetCurrentProcessId
HeapFree

user32

CascadeWindows
CallMsgFilterW
OpenWindowStationA
RemovePropW
AdjustWindowRectEx
LoadCursorFromFileA
GetWindowThreadProcessId
PostMessageW
LoadStringW
EnumWindows
ShowWindow

mpr

WNetGetResourceParentW
WNetGetProviderNameA
WNetAddConnectionW
WNetAddConnection2W
WNetGetResourceParentA
WNetAddConnection3A

msacm32

acmFormatTagDetailsA
acmDriverClose
acmFilterTagEnumA
acmDriverRemove
acmGetVersion
acmFormatEnumW
acmDriverEnum
acmStreamUnprepareHeader
acmFormatTagEnumW

urlmon

URLDownloadToFileW
URLDownloadToCacheFileA
HlinkSimpleNavigateToString
RevokeFormatEnumerator
BindAsyncMoniker
URLDownloadToCacheFileW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

837fbed30bde53eefb04ef05582cbbb8

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

shlwapi

kernel32

user32

mpr

msacm32

urlmon

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 136B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 136B