b8bb4ae6fe0f110fcc30fb5bcbcb604397e6250262956facdc552d44a7bd9101

Sharing

Copy URL Twitter E-mail

General

Target

b8bb4ae6fe0f110fcc30fb5bcbcb604397e6250262956facdc552d44a7bd9101
Size

230KB
MD5

6764d46b6e581c4fcdffcafdb8fffdd0
SHA1

3790604058fd93f23be3c7834f863fdea2f3f46e
SHA256

b8bb4ae6fe0f110fcc30fb5bcbcb604397e6250262956facdc552d44a7bd9101
SHA512

68cb8b5a8ca09bc7462e6fe163a26ad3e3c59efd46ed9b67cc696102280d6462bc48222500c2146654ba14bbd8108685cb74c4ce9cd6d31e1d7b28da47adf27d
SSDEEP

3072:K2JOJF1EdlYsSxQtbvIcH7zAsUoc2P/6xSJRP53f80z1emKN:OEdlYsSg04HAs1c2PCx4FRKN

Score

N/A

Malware Config

Signatures

Files

b8bb4ae6fe0f110fcc30fb5bcbcb604397e6250262956facdc552d44a7bd9101
.exe windows x86

8ccea97cf4c7910812cb73c16af191ee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileInformationByHandle
SetSystemTimeAdjustment
WriteFileEx
GetProcAddress
SetThreadContext
LocalAlloc
SetEnvironmentVariableA
CompareStringW
GetModuleHandleA
SetCriticalSectionSpinCount
GetSystemTimeAsFileTime
GetLastError
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetModuleHandleW
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
CloseHandle
SetHandleCount
GetFileType
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetFullPathNameA
GetCurrentDirectoryA
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
SetStdHandle
FlushFileBuffers
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetEndOfFile
GetProcessHeap
ReadFile
CompareStringA
CreateDirectoryA

user32

ReplyMessage
SetRectEmpty
EndDeferWindowPos

advapi32

RegisterEventSourceA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8ccea97cf4c7910812cb73c16af191ee

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 119KB - Virtual size: 118KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 95KB - Virtual size: 103KB

.text
Size: 119KB - Virtual size: 118KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 95KB - Virtual size: 103KB