ffb01a958daa86481348baf368b5b1aa2b373861f4cac44b0cfc88927969fd6f

Sharing

Copy URL Twitter E-mail

General

Target

ffb01a958daa86481348baf368b5b1aa2b373861f4cac44b0cfc88927969fd6f
Size

192KB
MD5

a0bed8369b429dbce63ef8ad450a41b6
SHA1

6a7ea4353e5aab4f0cac0439f4fee665970a9719
SHA256

ffb01a958daa86481348baf368b5b1aa2b373861f4cac44b0cfc88927969fd6f
SHA512

d68e4d2f0e5821ed88a3aeb4e26c00d6438283e5b0cd01cd69e6f3ac31d4cdd7c9a8daba72e558c06c36e12c1a246d8501049b9c639f0410181dd821ba843961
SSDEEP

3072:L7/bM1pvT+MsGYttCygF7Ffv/eyk9+zD9M3Z3nwBZlRPRKlfW:rM11+wYiZeyW+zxM3ZwnrKlf

Score

N/A

Malware Config

Signatures

Files

ffb01a958daa86481348baf368b5b1aa2b373861f4cac44b0cfc88927969fd6f
.exe windows x86

b8077d520cd30b046749e1483d205507

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
CreateThread
ReadFile
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
GetPrivateProfileIntA
Sleep
GetLocalTime
LoadLibraryA
GetProcAddress
GetFileAttributesA
GetSystemTime
lstrcpyA
GetModuleHandleA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
InterlockedDecrement
InterlockedIncrement
IsDBCSLeadByte
GetCurrentThreadId
lstrcmpiA
lstrlenA
GetModuleFileNameA
GetCurrentProcess
CloseHandle
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
HeapReAlloc
GetProcessHeap
GetStartupInfoA
GetCPInfo
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
VirtualFree
HeapDestroy
HeapCreate
ExitProcess
WriteFile
GetStdHandle
SetHandleCount
GetFileType
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

CharUpperA
MessageBoxA
TranslateMessage
CharNextA
LoadStringA
UnregisterClassA
PostThreadMessageA
GetMessageA
DispatchMessageA

advapi32

StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
DuplicateTokenEx
SetTokenInformation
CreateProcessAsUserA
OpenSCManagerW
ChangeServiceConfigA
ChangeServiceConfig2A
RegEnumKeyExA
RegQueryInfoKeyA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegSetValueExA
ControlService
DeleteService
CreateServiceA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
SetServiceStatus
OpenSCManagerA
OpenServiceA
CloseServiceHandle
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

ole32

CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc

shell32

SHGetSpecialFolderPathA

oleaut32

VarUI4FromStr

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b8077d520cd30b046749e1483d205507

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

shell32

oleaut32

Sections

.text Size: 80KB - Virtual size: 76KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 80KB - Virtual size: 80KB

.text
Size: 80KB - Virtual size: 76KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 80KB - Virtual size: 80KB