bb0b896b4c87d3d3a89f9973f2e9cd2c5cc5b338560d495b9d24b219c0f797ef

Sharing

Copy URL Twitter E-mail

General

Target

bb0b896b4c87d3d3a89f9973f2e9cd2c5cc5b338560d495b9d24b219c0f797ef
Size

108KB
MD5

8150cd3278559252746cc4a7f0201160
SHA1

049ebf0deca11ad04906fe2de13237bcffd295e5
SHA256

bb0b896b4c87d3d3a89f9973f2e9cd2c5cc5b338560d495b9d24b219c0f797ef
SHA512

58ecef299edb423f32b3198072648f6206803632570560b569d6ab25c207b28534ebea0c5a85a6ac6d3990d16869d74736fca0ba612e3ce1612fe0bcfad943d1
SSDEEP

3072:1+u9hQZR1HqCkT8fPhdEnEubdnlkA/Xeyo:MGhKkT8R6nPdR6

Score

N/A

Malware Config

Signatures

Files

bb0b896b4c87d3d3a89f9973f2e9cd2c5cc5b338560d495b9d24b219c0f797ef
.exe windows x86

53ad221a61decf337d0d70b937013152

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetFileSize
CreateFileW
WriteFile
ReadFile
SetFilePointer
GetShortPathNameW
GetTempPathW
OpenSemaphoreW
CreateSemaphoreW
CreateEventW
OpenEventW
CreateDirectoryW
GetModuleFileNameW
GetEnvironmentVariableW
ExitProcess
SetEvent
Sleep
GlobalMemoryStatus
WideCharToMultiByte
lstrcpyW
GetVersionExW
GetComputerNameW
CreateMutexW
FreeLibrary
CreateThread
FindClose
FindNextFileW
FindFirstFileW
GetProcAddress
LoadLibraryW
WaitForMultipleObjects
OpenMutexW
ExitThread
DeleteFileW
CreateProcessW
ResumeThread
SuspendThread
MultiByteToWideChar
WaitForSingleObject
ReleaseMutex
ReleaseSemaphore
GetLastError
GetSystemInfo
GetTickCount
CompareStringW
CompareStringA
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
SetEndOfFile
LoadLibraryA
GetOEMCP
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
RtlUnwind
HeapAlloc
HeapFree
GetTimeZoneInformation
GetSystemTime
GetLocalTime
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
LCMapStringA
LCMapStringW
GetACP
SetEnvironmentVariableA

advapi32

RegSetValueExW
GetUserNameW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
IsTextUnicode

wininet

InternetQueryDataAvailable
InternetReadFile
HttpOpenRequestW
HttpSendRequestW
InternetConnectW
InternetSetOptionW
InternetCloseHandle
InternetOpenW

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

53ad221a61decf337d0d70b937013152

Headers

File Characteristics

Imports

kernel32

advapi32

wininet

Sections

.text Size: 64KB - Virtual size: 63KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 24KB - Virtual size: 23KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 24KB - Virtual size: 23KB