40b8f2ea4b3d8a31aabb5271c7e6962f8bf2fdf918b695c32186e58c5cabefbe

Sharing

Copy URL Twitter E-mail

General

Target

40b8f2ea4b3d8a31aabb5271c7e6962f8bf2fdf918b695c32186e58c5cabefbe
Size

15KB
MD5

6daf490bb4c88194c685265c8cb57040
SHA1

d584fde278ffa080d8678da1fa4a0e8eadedd08a
SHA256

40b8f2ea4b3d8a31aabb5271c7e6962f8bf2fdf918b695c32186e58c5cabefbe
SHA512

f28dbe48fb510a813c95f0a4341f047c609c814885e900bf511788c039569348fba25f7a1dfb102a8ce686ea10b77c920004c2241dd954eb31c19bd3a21fbc38
SSDEEP

384:V7dIn8BqVX2hhtK4d1ij5bzR2LrLdSpo+8dml7GG:V7Sz9WhcrbzR2L1Uo+84AG

Score

N/A

Malware Config

Signatures

Files

40b8f2ea4b3d8a31aabb5271c7e6962f8bf2fdf918b695c32186e58c5cabefbe
.exe windows x86

a8a254011495b0f1253f19e3f6a7df92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapFree
LoadLibraryA
LoadResource
LocalAlloc
LocalFree
LockResource
MapViewOfFile
MultiByteToWideChar
OpenProcess
ReadFile
RtlMoveMemory
RtlZeroMemory
FindNextFileA
GlobalUnlock
SetFilePointer
SizeofResource
Sleep
UnmapViewOfFile
VirtualAlloc
VirtualFree
WriteFile
lstrcatA
lstrcmpW
lstrcmpiA
lstrcpyA
lstrlenA
FindFirstFileA
GlobalLock
GetVersionExA
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetLocalTime
GetFileSize
GetFileAttributesA
GetEnvironmentVariableA
GetCommandLineA
FindClose
FreeResource
FreeLibrary
SetFileAttributesA
FindResourceA
ExitProcess
DeleteFileA
CreateThread
CreateProcessA
CreateMutexA
CreateFileMappingA
CreateFileA
CreateDirectoryA
CopyFileA
SetEndOfFile
CloseHandle

user32

UpdateWindow
TranslateMessage
ToAsciiEx
ShowWindow
SetTimer
SetClipboardViewer
SendMessageA
RegisterRawInputDevices
RegisterClassExA
OpenClipboard
MapVirtualKeyExA
LoadIconA
LoadCursorA
IsClipboardFormatAvailable
GetWindowThreadProcessId
wsprintfA
ChangeClipboardChain
CloseClipboard
CreateWindowExA
DefWindowProcA
GetMessageA
DispatchMessageA
GetClassNameA
GetClipboardData
GetDC
GetForegroundWindow
GetKeyNameTextA
GetKeyboardLayout
GetWindowTextA
GetWindowLongA
GetSystemMetrics
GetRawInputData
GetKeyboardState

shlwapi

PathRenameExtensionA
PathMatchSpecA
PathAddBackslashA
PathFindFileNameA

advapi32

AllocateAndInitializeSid
CryptEncrypt
CryptExportKey
CryptGenKey
CryptReleaseContext
FreeSid
RegCreateKeyExA
RegNotifyChangeKeyValue
RegSetValueExA
CryptAcquireContextA
CheckTokenMembership
CryptDestroyKey

ws2_32

socket
recv
gethostbyname
connect
closesocket
WSAStartup
send

wininet

InternetOpenA
InternetConnectA
InternetCloseHandle
FtpPutFileA

gdi32

CreateCompatibleDC
DeleteDC
DeleteObject
GetDIBits
SelectObject
StretchBlt
CreateDIBSection

gdiplus

GdipDisposeImage
GdipGetImageEncodersSize
GdipLoadImageFromFile
GdipSaveImageToFile
GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders

psapi

GetProcessImageFileNameA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a8a254011495b0f1253f19e3f6a7df92

Headers

File Characteristics

Imports

kernel32

user32

shlwapi

advapi32

ws2_32

wininet

gdi32

gdiplus

psapi

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 1024B - Virtual size: 59KB

.rsrc Size: 512B - Virtual size: 396B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 1024B - Virtual size: 59KB

.rsrc
Size: 512B - Virtual size: 396B