8f43e54f265ed7f6ed7dc626f9d1439edb587922b1eae5feb2069421cb39242b

Sharing

Copy URL Twitter E-mail

General

Target

8f43e54f265ed7f6ed7dc626f9d1439edb587922b1eae5feb2069421cb39242b
Size

180KB
MD5

001c27810a1cd0d4098cd48a02adab90
SHA1

9aae9449c0503cd96fdfcd8e3b872944d50b8838
SHA256

8f43e54f265ed7f6ed7dc626f9d1439edb587922b1eae5feb2069421cb39242b
SHA512

6acee1c670525532612bb364217d3e8e1eb4ab10dcbb68fef4ee2277fa72a9997313d2faa3ea858eeb648630cfa6f881516d0c28f38dfc29835f3c383d8fd1c6
SSDEEP

3072:mNGcVbB6L4etlNkEqURdj7VF0inAAsrsWGjoYYR:GV91KVvVFDn6spjozR

Score

N/A

Malware Config

Signatures

Files

8f43e54f265ed7f6ed7dc626f9d1439edb587922b1eae5feb2069421cb39242b
.exe windows x86

c270b13f0ba3b6bfd47ca9a6c4b061fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
CreateThread
ReadFile
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
GetPrivateProfileIntA
Sleep
GetLocalTime
LoadLibraryA
GetProcAddress
GetFileAttributesA
GetSystemTime
lstrcpyA
GetModuleHandleA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
InterlockedDecrement
InterlockedIncrement
IsDBCSLeadByte
GetCurrentThreadId
lstrcmpiA
GetModuleFileNameA
lstrlenA
GetCurrentProcess
CloseHandle
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
HeapReAlloc
GetProcessHeap
GetStartupInfoA
GetCPInfo
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
VirtualFree
HeapDestroy
HeapCreate
ExitProcess
WriteFile
GetStdHandle
SetHandleCount
GetFileType
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

CharUpperA
MessageBoxA
TranslateMessage
CharNextA
LoadStringA
UnregisterClassA
PostThreadMessageA
GetMessageA
DispatchMessageA

advapi32

StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
DuplicateTokenEx
SetTokenInformation
CreateProcessAsUserA
OpenSCManagerW
ChangeServiceConfigA
ChangeServiceConfig2A
RegEnumKeyExA
RegQueryInfoKeyA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
ControlService
DeleteService
CreateServiceA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
SetServiceStatus
OpenSCManagerA
OpenServiceA
CloseServiceHandle
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

ole32

CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc

shell32

SHGetSpecialFolderPathA

oleaut32

VarUI4FromStr

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c270b13f0ba3b6bfd47ca9a6c4b061fb

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

shell32

oleaut32

Sections

.text Size: 80KB - Virtual size: 79KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 3KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 80KB - Virtual size: 79KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 3KB

.rmnet
Size: 60KB - Virtual size: 60KB