2b48ba9d30bbe9ae45708d2f10741ade0426a61aa770a02e51a020a87e6ad910

Sharing

Copy URL Twitter E-mail

General

Target

2b48ba9d30bbe9ae45708d2f10741ade0426a61aa770a02e51a020a87e6ad910
Size

232KB
MD5

6586a9c902b311d146b0c9fb0448eb80
SHA1

2b8edc65843f0029aab1d3ed27e1dff7fdb7d9d8
SHA256

2b48ba9d30bbe9ae45708d2f10741ade0426a61aa770a02e51a020a87e6ad910
SHA512

0a4ae8da21e2f477e7538a0f793f77a95214fb94c60dc0c859bf937e1a86d1821dc22ffd9ccb2b7e64e718f66ca92dac880be745b7784e9b6850513bc773ebde
SSDEEP

3072:+siz2V7AZmmyPJ6nrjp9BJvXXZogeDoA0sY4cTuWW2sETJeKQA+yRDbWe:+P2V7Azjp9jvXJo833CWDsEiYx

Score

N/A

Malware Config

Signatures

Files

2b48ba9d30bbe9ae45708d2f10741ade0426a61aa770a02e51a020a87e6ad910
.exe windows x86

79ed1d63e1f8982b23328eea9bd4a097

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
CreateProcessA
GetLocaleInfoA
WinExec
GetSystemDirectoryA
GetCurrentDirectoryA
GetCommandLineA
Sleep
CreateMutexA
ReleaseMutex
SetFileAttributesA
DeleteFileA
MoveFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
GetSystemWindowsDirectoryA
CompareStringW
SetEnvironmentVariableA
SetFilePointer
WriteFile
lstrcmpA
GetWindowsDirectoryA
lstrcpynA
GetEnvironmentVariableA
GetFileAttributesA
CreateDirectoryA
GetPrivateProfileStringA
GetProcAddress
FreeLibrary
LoadLibraryA
GetCurrentThread
lstrcatA
GetCurrentProcess
GetLastError
lstrcmpiA
CreateFileA
ReadFile
CloseHandle
lstrlenA
lstrcpyA
MultiByteToWideChar
GlobalAlloc
GlobalLock
GlobalHandle
InterlockedExchange
CompareStringA
SetConsoleCtrlHandler
FlushFileBuffers
SetStdHandle
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GlobalUnlock
GlobalFree
LocalFree
GetBinaryTypeA
GetModuleFileNameA
LocalAlloc
GetVersionExA
SetLastError
GetCurrentThreadId
GetSystemDefaultLCID
WideCharToMultiByte
lstrlenW
lstrcpyW
RtlUnwind
HeapAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapFree
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetFullPathNameA
SetCurrentDirectoryA
HeapSize
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType

user32

LoadKeyboardLayoutA
RegisterWindowMessageA
SystemParametersInfoA
wsprintfA
EnumWindows
UnloadKeyboardLayout
CharNextA
PostThreadMessageA
GetDC
wvsprintfA
ReleaseDC
GetClassNameA
SendMessageTimeoutA
PostMessageA

gdi32

TextOutA

advapi32

RegUnLoadKeyA
GetSidIdentifierAuthority
RegEnumKeyA
RegOpenKeyA
RegCreateKeyA
GetUserNameA
OpenThreadToken
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
InitializeSecurityDescriptor
RegSetKeySecurity
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
RegFlushKey
LookupPrivilegeValueA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetSidSubAuthorityCount
GetSidSubAuthority
FreeSid
IsValidSid
AllocateAndInitializeSid
GetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

StringFromGUID2
CoInitialize
CoUninitialize

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

imm32

ImmInstallIMEA

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

oujctyn
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

79ed1d63e1f8982b23328eea9bd4a097

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

version

imm32

Sections

.text Size: 136KB - Virtual size: 136KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 68KB - Virtual size: 68KB

oujctyn Size: - Virtual size: 4KB

.text
Size: 136KB - Virtual size: 136KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 68KB - Virtual size: 68KB

oujctyn
Size: - Virtual size: 4KB