b9163b30f3984ba861dcb8ee97aafaae21f60b380b64a5ce02ab40f0b905fc8a

Sharing

Copy URL

Twitter E-mail

General

Target

b9163b30f3984ba861dcb8ee97aafaae21f60b380b64a5ce02ab40f0b905fc8a
Size

208KB
MD5

a311c3fbd04dc0774c45b685729defe6
SHA1

3ffdc8a61dbaa6f1a657b113f578bd6e9bca6ed6
SHA256

b9163b30f3984ba861dcb8ee97aafaae21f60b380b64a5ce02ab40f0b905fc8a
SHA512

2a094533af0e2bd625134a77c5c02720c4705f457cfe802add2b5b7fc2f3d5c7a2a9707f5909154c6fd30e247f224092a3783b91d7cc3bca88df2efac07e434c
SSDEEP

3072:vAdB3a1EPjMgnElNdxRkwjcU5rBhRJgHAwdVy26YvSEAwlGEX+KXo2cF0:vw3a1EPDANdxewjciDS/YlYhlPXfoP0

Score

N/A

Malware Config

Signatures

Files

b9163b30f3984ba861dcb8ee97aafaae21f60b380b64a5ce02ab40f0b905fc8a
.exe windows x86

28f48d4c6eb56da97dfe67a8900e7709

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmSetOpenStatus
ImmGetContext
ImmGetIMEFileNameA
ImmGetConversionStatus
ImmSetConversionStatus
ImmReleaseContext
ImmCreateContext
ImmAssociateContext
ImmDestroyContext
ImmNotifyIME
ImmIsIME

kernel32

WriteFile
SetFilePointer
CreateFileA
GetLocaleInfoA
GetSystemDirectoryA
DeleteFileA
GetSystemDefaultLCID
GetSystemInfo
RemoveDirectoryA
Sleep
lstrcpyW
lstrlenW
WideCharToMultiByte
lstrcmpA
GetWindowsDirectoryA
lstrcpynA
GetEnvironmentVariableA
CreateDirectoryA
GetPrivateProfileStringA
FlushFileBuffers
GetProcAddress
CompareStringW
SetStdHandle
ReadFile
SetConsoleCtrlHandler
GetTimeZoneInformation
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetCurrentDirectoryA
GetCurrentDirectoryA
GetFullPathNameA
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
TerminateProcess
LCMapStringW
LCMapStringA
HeapFree
ExitProcess
GetVersion
GetStartupInfoA
GetModuleHandleA
FindFirstFileA
InterlockedExchange
GetDriveTypeA
FileTimeToLocalFileTime
GetCurrentThread
GetCurrentProcess
GetLastError
FreeLibrary
LoadLibraryA
GetFileAttributesA
WinExec
lstrcatA
GetTickCount
ReleaseMutex
WaitForSingleObject
UnmapViewOfFile
CloseHandle
CreateMutexA
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
lstrlenA
lstrcpyA
MultiByteToWideChar
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
lstrcmpiA
CompareStringA
GetCommandLineA
SetEnvironmentVariableA
FileTimeToSystemTime
FindClose
HeapAlloc
RtlUnwind
GetCurrentThreadId
SetLastError
GetVersionExA
LocalAlloc
GetModuleFileNameA
GetBinaryTypeA
LocalFree

user32

CharLowerA
LoadKeyboardLayoutA
SystemParametersInfoA
wsprintfA
IsCharAlphaA
GetKeyboardLayoutList
GetDlgItem
SetFocus
wsprintfW
DialogBoxParamA
DialogBoxParamW
FindWindowA
EnumChildWindows
GetDC
wvsprintfA
ReleaseDC
DrawTextW
DrawTextA
GetWindowTextLengthA
GetWindowTextLengthW
GetWindowTextW
GetWindowTextA
SetWindowTextW
SetWindowTextA
MessageBoxW
MessageBoxA
IsDialogMessageW
IsDialogMessageA
DefWindowProcW
DefWindowProcA
CallWindowProcW
CallWindowProcA
GetWindowLongW
GetWindowLongA
SetWindowLongW
SetWindowLongA
DispatchMessageW
DispatchMessageA
PeekMessageW
PeekMessageA
PostMessageW
IsWindowUnicode
SendMessageW
SendMessageA
GetClassNameA
SendMessageTimeoutA
PostMessageA
RegisterWindowMessageA
CharNextA
PostThreadMessageA
EnumWindows
UnloadKeyboardLayout
GetSysColor
GetKeyboardLayout
EndDialog

gdi32

TextOutW
TextOutA

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorA
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
GetSecurityDescriptorDacl
AllocateAndInitializeSid
IsValidSid
FreeSid
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
RegQueryValueExW
RegOpenKeyA
RegCreateKeyExW
RegSetValueExW
GetUserNameA
OpenThreadToken
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
InitializeSecurityDescriptor
RegSetKeySecurity
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
RegFlushKey
LookupPrivilegeValueA
RegOpenKeyExA
RegQueryInfoKeyA
RegCloseKey
RegEnumValueA
RegDeleteValueA
RegSetValueExA
RegEnumKeyExA
RegUnLoadKeyA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc

ole32

CoInitialize
StringFromGUID2
CoTaskMemFree
CoCreateInstance
CoUninitialize

msi

ord81

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

28f48d4c6eb56da97dfe67a8900e7709

Headers

File Characteristics

Imports

imm32

kernel32

user32

gdi32

advapi32

shell32

ole32

msi

Sections

.text Size: 144KB - Virtual size: 140KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 32KB - Virtual size: 42KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 144KB - Virtual size: 140KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 32KB - Virtual size: 42KB

.rsrc
Size: 8KB - Virtual size: 8KB