8e160bbd30e2b7b8ca9163e60505e757c27c02b6ecadc83af7854379b007e54f

Sharing

Copy URL Twitter E-mail

General

Target

8e160bbd30e2b7b8ca9163e60505e757c27c02b6ecadc83af7854379b007e54f
Size

210KB
MD5

b51fc1556c46a6c85554e16b452943a1
SHA1

b64ac17fb49a8ef6f0ebafc05ddedc43fca1cb15
SHA256

8e160bbd30e2b7b8ca9163e60505e757c27c02b6ecadc83af7854379b007e54f
SHA512

078ed593cc2013db89a09b4749900ddef57f91de4c4881a033560a6dcf510e4a8e21d9b3850cc1621836660bbc0f05318af7aa39b38c0b17966456c69ec1725d
SSDEEP

3072:9lIWQ8uNDRpyz8Ag0FuWZQ3OJUm6k2tm9LV7pHPUT:4WQ8ODQ8AOq6kug7pvUT

Score

N/A

Malware Config

Signatures

Files

8e160bbd30e2b7b8ca9163e60505e757c27c02b6ecadc83af7854379b007e54f
.exe windows x86

f908d81623fe5f7d49b096710448a598

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetProcessWindowStation
GetDlgItemTextW
CreateDialogParamA
ModifyMenuA
ClientToScreen
SetDlgItemTextW
SetRect
PeekMessageA
AppendMenuW
CharNextExA
GetClassLongA
ScreenToClient
GetWindowContextHelpId
IsWindowEnabled
CheckDlgButton
CallWindowProcW
CheckRadioButton
CharPrevW
IsDialogMessageA
DefFrameProcA
ScrollDC
GetProcessDefaultLayout
MonitorFromPoint
DrawAnimatedRects
IsDlgButtonChecked
CopyAcceleratorTableW

shell32

SHFileOperationW

ole32

ReleaseStgMedium

advapi32

RegEnumKeyW
RegQueryValueExA

gdi32

GetFontData
RectVisible
Polyline
GetViewportOrgEx
GetLogColorSpaceA
CreateRectRgnIndirect
GetWindowOrgEx
ScaleWindowExtEx
GetEnhMetaFileBits
SetROP2
GetBitmapDimensionEx
GetStockObject
OffsetClipRgn
GetTextMetricsA

kernel32

RtlUnwind
HeapReAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
RaiseException
HeapSize
HeapAlloc
GetPriorityClass
PrepareTape
CloseHandle
CancelWaitableTimer
ResetEvent
ClearCommError
IsSystemResumeAutomatic
SetFileValidData
VirtualAlloc
OpenProcess
QueryInformationJobObject
GetCurrentProcessId
OutputDebugStringW
GetCommandLineA
SuspendThread
GetShortPathNameA
SetEnvironmentVariableW
CreateProcessW
lstrlenA
GetFileTime
CopyFileA
IsProcessorFeaturePresent
GetSystemDirectoryW
TerminateThread
LoadLibraryExA
CreateMutexA
FatalAppExitA
OpenEventW
GetLocaleInfoW
GetSystemTimeAsFileTime
GetStartupInfoA
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f908d81623fe5f7d49b096710448a598

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

ole32

advapi32

gdi32

kernel32

Sections

.text Size: 102KB - Virtual size: 101KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 15KB - Virtual size: 33KB

.rsrc Size: 68KB - Virtual size: 68KB

.text
Size: 102KB - Virtual size: 101KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 15KB - Virtual size: 33KB

.rsrc
Size: 68KB - Virtual size: 68KB