0fb8a38d8323b18c001c0d078227d32d1b72c42e9f93d776f4f10b4e93472ef4

General

Target

0fb8a38d8323b18c001c0d078227d32d1b72c42e9f93d776f4f10b4e93472ef4
Size

390KB
MD5

2bf2c0595fbb34ccf1b1b79ac5878fe6
SHA1

894427157c2190c0e01c0ae7825af6e3f44d98d7
SHA256

0fb8a38d8323b18c001c0d078227d32d1b72c42e9f93d776f4f10b4e93472ef4
SHA512

12caab0f20758107cf40b680bff56ad98c166e00f94f2be282fe184ac267b342a4cfd6db6f6e1c66e41e63648b78e956863584d6527e7a7592a3d3283ccfe146
SSDEEP

6144:xzdHQxSXGF7wYPtHBgA5C2tBcO7/cozNC7ZPxRie1nj7lpl7dHcERNDxHMENANVI:oxSXiPgA5TtBcOLc5xRigj7LxR114Ny

Score

N/A

Malware Config

Signatures

Files

0fb8a38d8323b18c001c0d078227d32d1b72c42e9f93d776f4f10b4e93472ef4
.exe windows x86

d8e8ca812ffd18b3920374472d0c48c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

comctl32

MenuHelp
CreateToolbar
DrawStatusText
ImageList_Add
ImageList_AddIcon
DrawStatusTextA

winmm

PlaySoundA
PlaySoundW
PlaySoundA
PlaySoundW
PlaySoundW
PlaySoundA
PlaySoundW
PlaySoundA
PlaySoundW
PlaySoundW
PlaySoundA
PlaySoundW
PlaySoundA
PlaySoundW
PlaySoundW

kernel32

HeapCreate
GetEnvironmentVariableW
WriteFile
ExitThread
_lopen
GetSystemDirectoryA
GetACP
ReadFile
OpenProcess
DuplicateHandle
Beep
CreateThread
WideCharToMultiByte
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetLastError
SetEnvironmentVariableA
ConvertDefaultLocale
GetTempPathW
HeapSize
GetTempPathA
InterlockedExchange
RtlUnwind
SetFilePointer
SetStdHandle
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
ExitProcess
MoveFileA
HeapDestroy
GetFileSize
VirtualProtect
LCMapStringW
LCMapStringA

version

VerQueryValueW
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoW
GetFileVersionInfoA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 498KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 382KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d8e8ca812ffd18b3920374472d0c48c7

Headers

File Characteristics

Imports

comctl32

winmm

kernel32

version

Sections

.text Size: 1KB - Virtual size: 1KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 3KB - Virtual size: 498KB

.rsrc Size: 382KB - Virtual size: 392KB

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 3KB - Virtual size: 498KB

.rsrc
Size: 382KB - Virtual size: 392KB