00bb674eca760b6acd67abe8a0d80a25c9bc540758b962cbb9b089cb23186bd1

General

Target

00bb674eca760b6acd67abe8a0d80a25c9bc540758b962cbb9b089cb23186bd1
Size

20KB
MD5

04c1df5ea000391f59d65028766cd480
SHA1

ba8113e3e97bfc0385e038d12decc09ff5b1ed08
SHA256

00bb674eca760b6acd67abe8a0d80a25c9bc540758b962cbb9b089cb23186bd1
SHA512

c4f2c2dad132972d3d8fd3a86f4f6cdd18e7878f363053262d040adc7b2e70a706edc3dda37dda98b4e5954319e1587f3d65d492377ab2bd04b9a990257bad5e
SSDEEP

384:FWmd3dD5X/kPoaJp2QX0JFWAgWgd5A3BYLbe8nUeI:955PJaXEjunHX5

Score

N/A

Malware Config

Signatures

Files

00bb674eca760b6acd67abe8a0d80a25c9bc540758b962cbb9b089cb23186bd1
.exe windows x86

f898dfde370680033c385046dcc94da8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA

kernel32

ExitProcess
GetModuleHandleA
GetCommandLineA
GetStartupInfoA
lstrcmpiA
FreeLibrary
LoadLibraryA
CreateEventA
GetSystemInfo
GetCurrentProcess
LocalAlloc
LocalFree
lstrcatA
CreateProcessA
OpenEventA
ResetEvent
CloseHandle
GetProcAddress
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetACP
GetVersionExA
GetSystemWindowsDirectoryA
GetSystemDirectoryA
lstrlenA
lstrcpynA

user32

EnumWindows
FindWindowA
PostMessageA
SetTimer
KillTimer
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
GetMessageA
SetWindowPos
GetSystemMetrics
LoadCursorA
RegisterClassExA
DefWindowProcA
PostQuitMessage
CreateWindowExA
GetClassNameA

msctf

TF_InvalidAssemblyListCacheIfExist
TF_InitSystem
TF_GetGlobalCompartment
TF_CreateCicLoadMutex
TF_PostAllThreadMsg
TF_InvalidAssemblyListCache
TF_UninitSystem

msutb

GetPopupTipbar
ClosePopupTipbar

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f898dfde370680033c385046dcc94da8

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

msctf

msutb

Sections

.text Size: 9KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 464B

.rsrc Size: 9KB - Virtual size: 30KB

.text
Size: 9KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 464B

.rsrc
Size: 9KB - Virtual size: 30KB