7b117ece3c2d3bf1cba979e6530c031af0a8924bc842f5b0d84309a08e99deed

Sharing

Copy URL Twitter E-mail

General

Target

7b117ece3c2d3bf1cba979e6530c031af0a8924bc842f5b0d84309a08e99deed
Size

72KB
MD5

3bc9a3e847cbbf672f3531a5e1910872
SHA1

29cf2ae8181f0cd694b52563fa977ae7298fa943
SHA256

7b117ece3c2d3bf1cba979e6530c031af0a8924bc842f5b0d84309a08e99deed
SHA512

52713090826eb11fd2a3068976331122838a8a2342d46bb03f7f91b7f8fe7bfb85d1a967d6d095827a7e9cf917c030850ab572b79c9ccc72e419596166b708c7
SSDEEP

1536:7edOYIIH5Qqh3lGgmmmdwJFbfU2ltDDS0FvtVqgpVYoV9:0cYQqHrbfFltnSSVYoV9

Score

N/A

Malware Config

Signatures

Files

7b117ece3c2d3bf1cba979e6530c031af0a8924bc842f5b0d84309a08e99deed
.exe windows x86

b16b4af0d4024d3c34aa19e1507c115e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
HeapSize
SetEndOfFile
SetFilePointer
WaitForSingleObject
GetSystemInfo
VirtualProtect
GetLocaleInfoA
InitializeCriticalSection
CreateFileA
CloseHandle
CreateThread
lstrcpyA
Beep
CreateProcessA
Sleep
SetEvent
GetModuleHandleA
ReadFile
FlushFileBuffers
ExitProcess
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetACP
GetOEMCP
GetCPInfo
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
HeapFree
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle

user32

MessageBoxA
RegisterClassA
CreateWindowExA
PeekMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
SetForegroundWindow
GetCursorPos
AppendMenuA
TrackPopupMenu
RegisterWindowMessageA
SetWindowPos
DefWindowProcA
GetSystemMetrics
LoadImageA
CreatePopupMenu

advapi32

RegisterServiceCtrlHandlerA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
RegSetValueExA
SetServiceStatus
StartServiceCtrlDispatcherA

shell32

Shell_NotifyIconA

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b16b4af0d4024d3c34aa19e1507c115e

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 24KB - Virtual size: 23KB

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 24KB - Virtual size: 23KB