b8722ad343d5247c912dd527014bb8c979320ed5bdadf231e46df036a2739c25

Sharing

Copy URL

Twitter E-mail

General

Target

b8722ad343d5247c912dd527014bb8c979320ed5bdadf231e46df036a2739c25
Size

165KB
MD5

3ae66d383d792bc05a28b96e3ac0eda3
SHA1

3f645c499cf343b19c89f68904bcfb7b4d74de9b
SHA256

b8722ad343d5247c912dd527014bb8c979320ed5bdadf231e46df036a2739c25
SHA512

daaa2b0f7a4e5485583d4a4f9c585fb9c5adf39d904f9654228a589687ca9613e38496aead61b389c0b06c4f332fc058cadb5169b7f1291b94db134f331ff96e
SSDEEP

3072:kgO0Uq+4zf5bNWcbGnM8JoXtitrOm9da+VOugv7GYLOeGW/X:kxiDD5bNAnM1XwJOud/VjkSMSA

Score

N/A

Malware Config

Signatures

Files

b8722ad343d5247c912dd527014bb8c979320ed5bdadf231e46df036a2739c25
.exe windows x86

94a7b8136f5447a631d73aa145195d8c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
ExitProcess
HeapReAlloc
LCMapStringA
WideCharToMultiByte
LCMapStringW
LoadLibraryA
GetWindowsDirectoryW
VirtualProtect
GetSystemInfo
VirtualQuery
GetLocaleInfoA
GetCPInfo
GetStringTypeA
GetStringTypeW
RtlUnwind
SetStdHandle
FlushFileBuffers
CloseHandle
HeapAlloc
HeapFree
GetVersionExA
GetStartupInfoW
GetModuleHandleA
GetCommandLineW
VirtualAlloc
GetLastError
GetUserDefaultUILanguage
SetFilePointer
SetCurrentDirectoryW

gdi32

CreateFontIndirectW
DeleteObject
CreateCompatibleDC
SelectObject
GetTextMetricsW
DeleteDC
GetObjectW

user32

DialogBoxParamW
SendDlgItemMessageA
SetClassLongA
mouse_event
IsDlgButtonChecked
EndDialog
SetForegroundWindow
AllowForegroundActivation
SetWindowPos
SetWindowLongW
GetWindowLongW
GetDlgItem
SendDlgItemMessageW
PostQuitMessage
LoadStringW
SendMessageW
LoadIconW
EnableWindow
SetWindowTextW
SetDlgItemTextW
LoadIconA

comctl32

ord17

shell32

CommandLineToArgvW
ShellExecuteW

shlwapi

UrlEscapeW
UrlUnescapeW

ntdll

RtlFreeHeap
RtlQueryEnvironmentVariable_U
NtMapViewOfSection
NtCreateSection
NtUnmapViewOfSection
NtProtectVirtualMemory
NtAllocateVirtualMemory
NtFreeVirtualMemory
NtQuerySystemInformation
NtQueryVirtualMemory
NtQueryInformationFile
RtlDoesFileExists_U
RtlUnicodeStringToInteger
RtlAllocateHeap
RtlExpandEnvironmentStrings_U
RtlAppendUnicodeStringToString
RtlStringFromGUID
NtQueryAttributesFile
NtQueryInformationProcess
RtlFormatCurrentUserKeyPath
NtCreateKey
NtSetValueKey
DbgPrint
strchr
isdigit
strspn
_vsnprintf
sprintf
RtlUpcaseUnicodeToMultiByteN
NtWriteFile
RtlAppendUnicodeToString
NtDeleteFile
NtOpenKey
NtQueryValueKey
NtClose
RtlDosPathNameToNtPathName_U
NtCreateFile
qsort
RtlCreateUnicodeString
RtlFreeUnicodeString
RtlInitUnicodeString
RtlGUIDFromString

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 109KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

94a7b8136f5447a631d73aa145195d8c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

user32

comctl32

shell32

shlwapi

ntdll

Sections

.text Size: 50KB - Virtual size: 50KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 109KB - Virtual size: 111KB

.text
Size: 50KB - Virtual size: 50KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 109KB - Virtual size: 111KB