0e0dc4671cd801dc2806c2f3ea9998ae4a80317fc7e317c370127940eef90a40

Sharing

Copy URL Twitter E-mail

General

Target

0e0dc4671cd801dc2806c2f3ea9998ae4a80317fc7e317c370127940eef90a40
Size

61KB
MD5

d0e7fc0d85ab291cd511ac243feeeba0
SHA1

d24b6e57d94136fc787415e9364bfd3f925c124a
SHA256

0e0dc4671cd801dc2806c2f3ea9998ae4a80317fc7e317c370127940eef90a40
SHA512

e362e0e42f6efb2b28138f36e70fa0b398e252332eac4c8c148c020c9b06bbac4ae48dc25c82d5c08954396cb85f4754ae5476f76a13cb37bfba9c92a75089ea
SSDEEP

1536:Ma/nAmcLlT6B8ywcLvkfcLBcfcLRSwcL1SLsQCkbpOAzXu7Jg02Z:V/nAmcLlmVbkEcKSBSLsQCkbpOAz+7JM

Score

1^/10

Malware Config

Signatures

Files

0e0dc4671cd801dc2806c2f3ea9998ae4a80317fc7e317c370127940eef90a40
.exe windows x86

c17aba6378da69ec876fa15bba6829e2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFindFileNameA
PathStripPathA
StrCmpNIA
PathFileExistsA
SHSetValueA
PathAppendA
PathRemoveFileSpecA
PathRenameExtensionA

kernel32

CloseHandle
InterlockedCompareExchange
HeapSetInformation
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
SetUnhandledExceptionFilter
GetStdHandle
SetConsoleTextAttribute
lstrlenA
IsDebuggerPresent
GetEnvironmentVariableA
lstrcpyA
lstrcmpiA
OpenProcess
GetVersionExA
CreateToolhelp32Snapshot
Process32First
Process32Next
InterlockedExchange
GetCurrentProcessId
OutputDebugStringA
GetLocalTime
GetModuleFileNameA
GetFullPathNameA
SetFileAttributesA
MoveFileExA
GetTempPathA
CopyFileA
GetFileAttributesA
SetCurrentDirectoryA
GetCurrentProcess
CheckRemoteDebuggerPresent
GetSystemTime
Sleep
UnhandledExceptionFilter
TerminateProcess
EncodePointer

user32

ExitWindowsEx

shell32

ShellExecuteA

psapi

GetProcessImageFileNameA

msvcr100

_getche
fread
_stricmp
_controlfp_s
_invoke_watson
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
fopen
fprintf
__iob_func
fclose
remove
ftell
fseek
memset
feof
getc
_mktime64
_time64
sscanf
strstr
??2@YAPAXI@Z
??3@YAXPAX@Z
fgets
sprintf
_mbsicmp
malloc
exit
_mbsnbcpy
free
_mbsupr
_mbsnbicmp
fwrite
system
_mbsstr
scanf
atoi
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_crt_debugger_hook

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c17aba6378da69ec876fa15bba6829e2

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

shell32

psapi

msvcr100

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 23KB - Virtual size: 22KB

.data Size: 512B - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 23KB - Virtual size: 22KB

.data
Size: 512B - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 3KB