8b8fc2cd3bd05365ffed259e62acd2f3480d97a29620d0483504a91546a27a5b

Sharing

Copy URL Twitter E-mail

General

Target

8b8fc2cd3bd05365ffed259e62acd2f3480d97a29620d0483504a91546a27a5b
Size

109KB
MD5

0f4f393129ab87f8b9e6aef4da77c595
SHA1

3e798e1a2d02dcde5749244ec360301410a32eb2
SHA256

8b8fc2cd3bd05365ffed259e62acd2f3480d97a29620d0483504a91546a27a5b
SHA512

fc69812321c14b7355c75b495bd2d2e29816a104582e0777b4ff5bf1efb1056cd717bd0ed8eb1fae0e01c50fcf3b672722ee0bb508dcc9c875d036509dfbbc4c
SSDEEP

1536:AM5Q3EPhvwyNmtt8+FKO1FrAp0nXBi0QeBe+fnPvBKa1kbiCGpEqx+7TQC:vQU5YyNmt5KO1FrRXQK13vBK8D7EqNC

Score

N/A

Malware Config

Signatures

Files

8b8fc2cd3bd05365ffed259e62acd2f3480d97a29620d0483504a91546a27a5b
.exe windows x86

83d7f8ee40a80d02c3757cd50a1c8268

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegReplaceKeyA
RegDeleteValueA
RegOpenKeyExW
RegCreateKeyExA
RegQueryValueA
RegReplaceKeyW
RegEnumKeyA
RegQueryInfoKeyA
RegLoadKeyA
RegQueryValueExA
RegEnumKeyExA
RegEnumValueA
RegEnumKeyExW
RegQueryInfoKeyW
RegFlushKey
RegEnumKeyW
RegDeleteKeyA

comctl32

ImageList_DrawIndirect
ImageList_EndDrag
ImageList_DragLeave
ImageList_Destroy
InitCommonControls
ImageList_Copy
ImageList_GetImageInfo
ImageList_Remove
ImageList_Read
ImageList_LoadImageW
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_Create
ImageList_Replace
ImageList_GetImageRect
ImageList_GetImageCount
ImageList_BeginDrag
ImageList_DragShowNolock

gdi32

AddFontResourceTracking
ClearBitmapAttributes
AddFontResourceW
CancelDC
DeleteObject
ExcludeClipRect
RestoreDC
AbortPath
AddFontMemResourceEx
GetPixel
AddFontResourceA
CloseFigure
CopyMetaFileA
BitBlt
GetCurrentPositionEx
CloseMetaFile
AddFontResourceExA

kernel32

CopyFileExA
GetStdHandle
CreateProcessA
GetCPInfo
ReadConsoleA
DeleteFileW
WriteFile
OpenFile
DeleteAtom
ExitThread
GlobalFree
GetComputerNameA
GetFileSize
GetFileTime
FindAtomA
Sleep
SetLastError
OpenFileMappingA
GetConsoleMode

user32

InsertMenuA
LoadCursorA
GetWindowTextLengthA
DrawIcon
GetFocus
GetWindowTextA
IsWindow
DrawTextA
CloseWindow
GetMenu
LoadMenuA
AlignRects
GetDlgItem
DrawIconEx
CreateIcon
CopyImage
DialogBoxParamA
EndDialog
IsMenu
DrawTextW
GetDC

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 101KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 309B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83d7f8ee40a80d02c3757cd50a1c8268

Headers

File Characteristics

Imports

advapi32

comctl32

gdi32

kernel32

user32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 101KB - Virtual size: 187KB

.reloc Size: - Virtual size: 998B

.rsrc Size: 512B - Virtual size: 309B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 101KB - Virtual size: 187KB

.reloc
Size: - Virtual size: 998B

.rsrc
Size: 512B - Virtual size: 309B