8b258214e88dfb49fade7d5a7913883a23f2c459e801d5e7233d9f2ac9b9b14d

Sharing

Copy URL

Twitter E-mail

General

Target

8b258214e88dfb49fade7d5a7913883a23f2c459e801d5e7233d9f2ac9b9b14d
Size

927KB
MD5

66ec4b731f258d7d148fe0900603e3d0
SHA1

92152ea291e4f400739c10fb15ca98708530703b
SHA256

8b258214e88dfb49fade7d5a7913883a23f2c459e801d5e7233d9f2ac9b9b14d
SHA512

9e8b59888311ef203877d68d99775187b5ab9d284a32485908b3103ba24e34aa89b0880a358b4aadf4097d364080cc6a3b5c79f9a010df36ebb37753ca2adaed
SSDEEP

768:dYsgOMid3vN92VN8+83wvZNJ9D4adHyLmF3Ujv3sCjQB9hw46UOZf81ah3fEDcnS:wOMiFaVo67FkrlyjVO1jTeXV

Score

N/A

Malware Config

Signatures

Files

8b258214e88dfb49fade7d5a7913883a23f2c459e801d5e7233d9f2ac9b9b14d
.exe windows x86

febef8e01fdb0dce893b8b2665266327

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenUserClassesRoot
LogonUserA

gdi32

CreateDCW

kernel32

VirtualAlloc
DisableThreadLibraryCalls
FatalExit
FreeLibraryAndExitThread
GetConsoleTitleW
LocalFree
lstrcmpW
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
EncodePointer
GetLastError
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
WriteFile
GetStdHandle
GetModuleFileNameW
IsProcessorFeaturePresent
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapFree
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
RtlUnwind
HeapAlloc
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW

ole32

StgOpenAsyncDocfileOnIFillLockBytes

oleaut32

VarUI4FromStr
SafeArrayAllocDescriptor

rpcrt4

NDRSContextUnmarshall2

user32

UserHandleGrantAccess
PeekMessageW
RedrawWindow
SendMessageCallbackA

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 400KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 477KB - Virtual size: 485KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

febef8e01fdb0dce893b8b2665266327

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

gdi32

kernel32

ole32

oleaut32

rpcrt4

user32

Sections

.text Size: 46KB - Virtual size: 46KB

.rdata Size: 400KB - Virtual size: 400KB

.data Size: 477KB - Virtual size: 485KB

.text
Size: 46KB - Virtual size: 46KB

.rdata
Size: 400KB - Virtual size: 400KB

.data
Size: 477KB - Virtual size: 485KB