b8ffcefcaf95d33de71ae940b6df595b05e58a0b261e1a2b6d81384e9dd01f4b

Sharing

Copy URL Twitter E-mail

General

Target

b8ffcefcaf95d33de71ae940b6df595b05e58a0b261e1a2b6d81384e9dd01f4b
Size

109KB
MD5

6cdd155183c50c82b4728088906f3271
SHA1

3b142381167c58c78be2f35f0560aafcfe7ad08c
SHA256

b8ffcefcaf95d33de71ae940b6df595b05e58a0b261e1a2b6d81384e9dd01f4b
SHA512

ef60a961dfd59e846135a1fc8598fe98031016b16f295c55eb91453943ea4d5d3932ae8a355eb1b7ff40d13e50b2e48df9ac63b3f17ff141462f4dd0407c657a
SSDEEP

1536:AM5Q3EPhvwyNmtt8+FKO1FrAp0nXBi0QeBe+fnPvBKa1kbiCGpEqx+7TQx:vQU5YyNmt5KO1FrRXQK13vBK8D7EqNx

Score

N/A

Malware Config

Signatures

Files

b8ffcefcaf95d33de71ae940b6df595b05e58a0b261e1a2b6d81384e9dd01f4b
.exe windows x86

83d7f8ee40a80d02c3757cd50a1c8268

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegReplaceKeyA
RegDeleteValueA
RegOpenKeyExW
RegCreateKeyExA
RegQueryValueA
RegReplaceKeyW
RegEnumKeyA
RegQueryInfoKeyA
RegLoadKeyA
RegQueryValueExA
RegEnumKeyExA
RegEnumValueA
RegEnumKeyExW
RegQueryInfoKeyW
RegFlushKey
RegEnumKeyW
RegDeleteKeyA

comctl32

ImageList_DrawIndirect
ImageList_EndDrag
ImageList_DragLeave
ImageList_Destroy
InitCommonControls
ImageList_Copy
ImageList_GetImageInfo
ImageList_Remove
ImageList_Read
ImageList_LoadImageW
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_Create
ImageList_Replace
ImageList_GetImageRect
ImageList_GetImageCount
ImageList_BeginDrag
ImageList_DragShowNolock

gdi32

AddFontResourceTracking
ClearBitmapAttributes
AddFontResourceW
CancelDC
DeleteObject
ExcludeClipRect
RestoreDC
AbortPath
AddFontMemResourceEx
GetPixel
AddFontResourceA
CloseFigure
CopyMetaFileA
BitBlt
GetCurrentPositionEx
CloseMetaFile
AddFontResourceExA

kernel32

CopyFileExA
GetStdHandle
CreateProcessA
GetCPInfo
ReadConsoleA
DeleteFileW
WriteFile
OpenFile
DeleteAtom
ExitThread
GlobalFree
GetComputerNameA
GetFileSize
GetFileTime
FindAtomA
Sleep
SetLastError
OpenFileMappingA
GetConsoleMode

user32

InsertMenuA
LoadCursorA
GetWindowTextLengthA
DrawIcon
GetFocus
GetWindowTextA
IsWindow
DrawTextA
CloseWindow
GetMenu
LoadMenuA
AlignRects
GetDlgItem
DrawIconEx
CreateIcon
CopyImage
DialogBoxParamA
EndDialog
IsMenu
DrawTextW
GetDC

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 101KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 309B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83d7f8ee40a80d02c3757cd50a1c8268

Headers

File Characteristics

Imports

advapi32

comctl32

gdi32

kernel32

user32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 101KB - Virtual size: 187KB

.reloc Size: - Virtual size: 998B

.rsrc Size: 512B - Virtual size: 309B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 101KB - Virtual size: 187KB

.reloc
Size: - Virtual size: 998B

.rsrc
Size: 512B - Virtual size: 309B