Приложение к договору для бухгалтерии[.]docx[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Приложение к договору для бухгалтерии.docx.exe
Size

544KB
MD5

fd8a13138f6c6c24e3606395854ec46a
SHA1

c83c0b064a254ff92e72bc0c9f6c0eaab9db1955
SHA256

1672e37c53a0b6c1cca8281f0aa97ddd569a652f26402cb3f610869ef6a62a57
SHA512

21a7b5d7fe7bfe1f60e7e8aaedb770b9aa966c8029379856f5869bdfdba70820def6937e39ec7278fa08983671589388bbedbd1a5580aa0b7df2f4a107c4cd05
SSDEEP

12288:m64NSsaa4WBz4LVOrarsnCa0USMjMZEK5N8YwKP9MWqDfppppppq31:m6OSIf94ErarsnNt1oXrDX9MdDfppppq

Score

N/A

Malware Config

Signatures

Files

Приложение к договору для бухгалтерии.docx.exe
.exe windows x86

340e82a37b623e7bb2278887f9483fb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
lstrcmpiW

msvcrt

_strdup
_stricoll
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_fullpath
_iob
_onexit
_setmode
abort
atexit
atoi
calloc
fputc
free
fwrite
getenv
isspace
localeconv
malloc
mbstowcs
memcpy
memset
realloc
setlocale
signal
strchr
strcmp
strcoll
strlen
tolower
vfprintf
wcslen
wcstombs

user32

GetActiveWindow
GetDC
GetWindowDC
MessageBoxW

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

340e82a37b623e7bb2278887f9483fb3

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 46KB - Virtual size: 45KB

.data Size: 512B - Virtual size: 40B

.rdata Size: 2KB - Virtual size: 1KB

.eh_fram Size: 6KB - Virtual size: 5KB

.bss Size: - Virtual size: 2KB

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 148KB - Virtual size: 148KB

.rsrc Size: 1024B - Virtual size: 744B

.text
Size: 46KB - Virtual size: 45KB

.data
Size: 512B - Virtual size: 40B

.rdata
Size: 2KB - Virtual size: 1KB

.eh_fram
Size: 6KB - Virtual size: 5KB

.bss
Size: - Virtual size: 2KB

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 148KB - Virtual size: 148KB

.rsrc
Size: 1024B - Virtual size: 744B