08085a1b29740644855872370e6d0721e664b0b1fcd39329860fd9249e2dbf65

Sharing

Copy URL Twitter E-mail

General

Target

08085a1b29740644855872370e6d0721e664b0b1fcd39329860fd9249e2dbf65
Size

231KB
MD5

0b1c59f277dbf7094f9657df4e03bf8b
SHA1

63fdbeb96eb5c67ff459cff53303acb5673831f5
SHA256

08085a1b29740644855872370e6d0721e664b0b1fcd39329860fd9249e2dbf65
SHA512

2874fa332688605ca0e3c52d55c6deac49079fa36521801b8c646543572df568918a6dc1b2c0cf9dc5ff25196648eb24ace8f89789376669ac21a7f136fea91e
SSDEEP

6144:VbFV7pmnZjD2KVsJzv/JmmStUBCN8FhMdNSPXEB:g+KIr/Jv6aEB

Score

N/A

Malware Config

Signatures

Files

08085a1b29740644855872370e6d0721e664b0b1fcd39329860fd9249e2dbf65
.exe windows x86

9a270604dfaf1fe8d2c9e5bcbf9ac62e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
LoadLibraryW
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
lstrlenW
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
GlobalUnlock
GlobalLock
LeaveCriticalSection
EnterCriticalSection
InterlockedCompareExchange
lstrcpynW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
CloseHandle
InitializeCriticalSection
Sleep
GetCurrentThreadId
CreateThread
CreateEventW
SetEvent
GetCommandLineW
GetSystemDirectoryW
LoadLibraryA
RaiseException
GetVersionExW
LocalAlloc
GetVersionExA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersion
GetFileAttributesW
GetModuleHandleA
GetProcAddress
GetModuleHandleW
WaitForSingleObject

user32

PeekMessageW
CharNextW
SendMessageW
SetParent
ShowWindow
CharUpperW
DispatchMessageW
TranslateMessage
CreateWindowExW
DefWindowProcW
EnableWindow
RegisterClassExW
PostThreadMessageW
GetMessageW

advapi32

RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegSetValueExW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
GetHGlobalFromStream
CreateStreamOnHGlobal
CoUninitialize
CoInitializeEx
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
StringFromGUID2
CoCreateInstance

msvcrt

__wgetmainargs
_controlfp
??1type_info@@UAE@XZ
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
memset
_amsg_exit
_wcmdln
_except_handler3
free
malloc
_CxxThrowException
wcslen
__CxxFrameHandler
realloc
_c_exit
_exit
_XcptFilter
_cexit
exit

shlwapi

PathFindExtensionW

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 192KB - Virtual size: 1.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9a270604dfaf1fe8d2c9e5bcbf9ac62e

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

msvcrt

shlwapi

Sections

.text Size: 32KB - Virtual size: 32KB

.data Size: 512B - Virtual size: 844B

.rsrc Size: 5KB - Virtual size: 5KB

.vmp0 Size: 192KB - Virtual size: 1.3MB

.text
Size: 32KB - Virtual size: 32KB

.data
Size: 512B - Virtual size: 844B

.rsrc
Size: 5KB - Virtual size: 5KB

.vmp0
Size: 192KB - Virtual size: 1.3MB