fabbed2ddd1066fcd9032ac573d7b3eb1e6b04b2a0ef4a14d1b595b3c30e7422

Sharing

Copy URL Twitter E-mail

General

Target

fabbed2ddd1066fcd9032ac573d7b3eb1e6b04b2a0ef4a14d1b595b3c30e7422
Size

222KB
MD5

044c0d63b61caa3c8b62c5ee9dd20850
SHA1

281a9eaacfbb70055ea3214718f78cfa1f929783
SHA256

fabbed2ddd1066fcd9032ac573d7b3eb1e6b04b2a0ef4a14d1b595b3c30e7422
SHA512

96fd27490f37795f298caf0fbc270c10c483ca97095fa65ba0b9cfdda6c6a35c232a647bb8a448fadca29ba0df07140c5b60f9b00ab385bf5ec50aaa72d98933
SSDEEP

1536:jJHK1FDfg9pvUGo9Vt/InWNV7swS+HIiN6pn1JzLxHtXNDMPRgETE:jJaZgf7WjswfoiNWjzLxPFET

Score

N/A

Malware Config

Signatures

Files

fabbed2ddd1066fcd9032ac573d7b3eb1e6b04b2a0ef4a14d1b595b3c30e7422
.exe windows x86

50efb459da5f83dffda1c665b795a231

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetStartupInfoW
GetSystemTimeAsFileTime
GetTickCount
HeapCreate
HeapDestroy
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadStringPtrA
IsBadStringPtrW
GetCurrentProcessId
LeaveCriticalSection
LoadLibraryW
LocalFree
QueryPerformanceCounter
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualFree
WideCharToMultiByte
lstrcmpiW
lstrcpyW
lstrlenA
lstrlenW
GetCurrentProcess
GetCommandLineW
FreeLibrary
FormatMessageW
FlushInstructionCache
EnterCriticalSection
DeleteCriticalSection
CreateMutexW
CloseHandle
VirtualAllocEx
GetModuleHandleA
GetProcAddress
CreateFileA
IsBadWritePtr
lstrcatA

user32

GetWindowLongW
KillTimer
LoadBitmapW
LoadImageW
LoadStringW
MessageBoxW
MonitorFromRect
PostMessageW
PostQuitMessage
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetForegroundWindow
SetTimer
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoW
TranslateMessage
GetSysColorBrush
GetMonitorInfoW
GetMessageW
GetClientRect
FindWindowW
EndDialog
DispatchMessageW
DestroyWindow
DefWindowProcW
CreateWindowExW
CharNextW
CallWindowProcW
LoadIconA
DefWindowProcA
LoadIconW
GetSystemMetrics
LoadCursorA

gdi32

DeleteObject
GetStockObject

advapi32

RegOpenKeyA
CryptAcquireContextW
CryptCreateHash
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptReleaseContext
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW

shell32

CommandLineToArgvW

msvcrt

_XcptFilter
__dllonexit
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_onexit
_purecall
_snwprintf
_wcmdln
_wcsicmp
_wcsnicmp
exit
wcscat
wcscmp
wcscpy
wcslen

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50efb459da5f83dffda1c665b795a231

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msvcrt

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 206KB - Virtual size: 206KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 206KB - Virtual size: 206KB

.rsrc
Size: 5KB - Virtual size: 4KB