8f5d863d233ae7d0b026c228616eadc369814fd926107cd87aa289d7a4ddaa50

Sharing

Copy URL Twitter E-mail

General

Target

8f5d863d233ae7d0b026c228616eadc369814fd926107cd87aa289d7a4ddaa50
Size

348KB
MD5

e8644d738716fc6db42b353fb2b1ab26
SHA1

116870d0d10c5dc5df6eb28ade55c38b9d3a6e74
SHA256

8f5d863d233ae7d0b026c228616eadc369814fd926107cd87aa289d7a4ddaa50
SHA512

6a44c9d41bb9c0d6dc78dac2eb6ede59539d2e35abd5a111688a078f1ffcecd08ee3741c23bc62dbddffa71dbe988cfde6689194601386369929fa55426c301a
SSDEEP

6144:RYybSFRnYGnonytcBxw4ayj2lEYqJPNb9kR2T:lOFRnDoyAxw4arlEhtw2

Score

N/A

Malware Config

Signatures

Files

8f5d863d233ae7d0b026c228616eadc369814fd926107cd87aa289d7a4ddaa50
.exe windows x86

0fc6f40b57ef05aaf3fdbdd03a58c6c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
WideCharToMultiByte
LockResource
GetCurrentProcessId
GetEnvironmentStrings
lstrlenW
VirtualQuery
GetEnvironmentStringsW
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
LCMapStringW
LoadLibraryExW
GetLastError
LeaveCriticalSection
ExitProcess
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetProcAddress
FindFirstFileW
ResetEvent
FindFirstFileA
CompareStringW
GetProcessHeap
GlobalLock
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
SetEvent
EnterCriticalSection
HeapFree
GetACP
InterlockedIncrement
GetCurrentThreadId
SetEndOfFile
GetConsoleMode
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
GetModuleFileNameW
SetLastError
FormatMessageA
TlsGetValue
FindClose
LoadResource
InitializeCriticalSection
LocalFree
FreeLibrary
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
GetCPInfo
SetStdHandle
GetLocaleInfoW
FreeEnvironmentStringsW
SetErrorMode
ExpandEnvironmentStringsA
LocalAlloc
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetLocalTime
HeapDestroy
GetDriveTypeA
WaitForSingleObject
ReleaseMutex
GetStdHandle
SizeofResource
CreateProcessA
HeapCreate
VirtualFree
Sleep
IsBadReadPtr
VirtualAlloc
WriteConsoleW
GetOEMCP

user32

CheckMenuItem
EndDialog
PostMessageA
GetWindowRect
GetSystemMetrics
BeginPaint
PeekMessageA
EndPaint
SetTimer
GetWindowLongA
EnableMenuItem
LoadStringA
GetWindow
IsWindowEnabled
TranslateMessage
EnableWindow
ShowWindow
GetParent
GetMessageA
DestroyWindow
ClientToScreen
SendMessageA
GetDC
DispatchMessageA
IsWindow
ReleaseDC
MoveWindow
ScreenToClient
LoadCursorA
LoadIconA
SetDlgItemTextA
MessageBoxA
InvalidateRect
GetClientRect
SetCursor
GetDlgItem

advapi32

RegDeleteKeyA
RegDeleteValueA
RegSetValueExW
RegCreateKeyExA
RegQueryValueExA
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 312KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0fc6f40b57ef05aaf3fdbdd03a58c6c3

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 8KB - Virtual size: 6KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 312KB - Virtual size: 310KB

.rsrc Size: 8KB - Virtual size: 5KB

.text
Size: 8KB - Virtual size: 6KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 312KB - Virtual size: 310KB

.rsrc
Size: 8KB - Virtual size: 5KB