8ac7146cb182a8a4f445e0f52c6dad8458ef2541d2d83cd867c6deb87baa8393

Sharing

Copy URL Twitter E-mail

General

Target

8ac7146cb182a8a4f445e0f52c6dad8458ef2541d2d83cd867c6deb87baa8393
Size

78KB
MD5

02edd3dc97732fdbdd180dd15b93f216
SHA1

134036dca41481c4fe22045580d5ce8dfb48a5df
SHA256

8ac7146cb182a8a4f445e0f52c6dad8458ef2541d2d83cd867c6deb87baa8393
SHA512

90aaa45ba37790c3c424ffdd442d95bcfc0764f0ac0bc22c9a6a56ac267108d3deba51369b4f0ae777273315c394df586ef95676f82acb1720b98e993a307751
SSDEEP

1536:h8R36k5MZ8kXZjNyLsp/w96ef8/UH2Leenrd6bXFw4Pdmf:KR36ke1NyLsp/w96ef8/UHnenrd2lEf

Score

N/A

Malware Config

Signatures

Files

8ac7146cb182a8a4f445e0f52c6dad8458ef2541d2d83cd867c6deb87baa8393
.exe windows x86

47954b40735259cfea508f41718ef692

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExW
RegCreateKeyExA
RegCreateKeyExW
RegEnumValueA
RegEnumValueW
RegOpenKeyA
RegOpenKeyW
RegDeleteKeyA
RegDeleteKeyW
RegDeleteValueA
RegDeleteValueW
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyA
RegQueryInfoKeyW
RegEnumKeyExA
RegSetValueExA
RegEnumKeyExW
RegCloseKey

kernel32

LeaveCriticalSection
GetProcAddress
HeapDestroy
GetLastError
LoadResource
SizeofResource
lstrlenA
FreeLibrary
EnterCriticalSection
InterlockedIncrement
GetCommandLineW
GetCurrentThreadId
InitializeCriticalSection
Sleep
DeleteCriticalSection
CreateThread
WaitForSingleObject
CloseHandle
InterlockedDecrement
SetEvent
GetStartupInfoW
lstrcatW
LoadLibraryExW
CreateMutexW
CreateMutexA
GetShortPathNameA
LoadLibraryExA
LoadLibraryA
lstrcpynW
GetModuleHandleW
GetModuleFileNameW
GetModuleFileNameA
FindResourceW
FindResourceA
CreateEventW
CreateEventA
SetLastError
LoadLibraryW
DeleteFileW
IsBadWritePtr
GetShortPathNameW
lstrcpyW
FreeLibraryAndExitThread
WideCharToMultiByte
CreateFileW
GetTempFileNameW
GetTempPathW
WriteFile
lstrcmpiA
lstrcmpiW
GlobalLock
GlobalUnlock
GetVersionExA
lstrlenW
MultiByteToWideChar

ole32

CoRegisterClassObject
CoRevokeClassObject
CoInitializeEx
CoUninitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoResumeClassObjects
ReleaseStgMedium
CoCreateInstance
CoSuspendClassObjects

oleaut32

VarUI4FromStr
SysAllocString
RegisterTypeLi
LoadTypeLi
SysFreeString

shlwapi

StrRetToBufW

shell32

ShellExecuteExW
SHGetDesktopFolder
DragQueryFileW

msvcrt

_purecall
_controlfp
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
memmove
_wsplitpath
wcslen
_wcslwr
free
realloc
malloc
??2@YAPAXI@Z
??3@YAXPAX@Z

user32

GetWindow
IsWindowVisible
GetWindowThreadProcessId
GetDesktopWindow
GetParent
ShowWindow
IsIconic
SetForegroundWindow
SendMessageTimeoutA
SendMessageA
CharNextW
PostThreadMessageW
PostThreadMessageA
FindWindowW
RegisterClipboardFormatW
RegisterWindowMessageA
GetMessageA
DispatchMessageA
DispatchMessageW
FindWindowA
GetMessageW

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

XOR
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

47954b40735259cfea508f41718ef692

Headers

File Characteristics

Imports

advapi32

kernel32

ole32

oleaut32

shlwapi

shell32

msvcrt

user32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 32KB - Virtual size: 28KB

XOR Size: 2KB - Virtual size: 2KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 32KB - Virtual size: 28KB

XOR
Size: 2KB - Virtual size: 2KB