ab8a8208ba0af3e7364aa23bbbd9652c0a60bc313384c9db2f84a8efb3f29b64

Sharing

Copy URL

Twitter E-mail

General

Target

ab8a8208ba0af3e7364aa23bbbd9652c0a60bc313384c9db2f84a8efb3f29b64
Size

404KB
MD5

05db0b876a65677e0d4984dde05ec574
SHA1

14f3a8feecdfbd06012e01a52d819b9e9682400f
SHA256

ab8a8208ba0af3e7364aa23bbbd9652c0a60bc313384c9db2f84a8efb3f29b64
SHA512

32123d794575ba2b2435d8c0e839a41e62500e87c14886aec734ce30097a16c854ed3677bca5616f25a0565ed14547f62c834a5c12f4595f4c675746b3ef9f62
SSDEEP

12288:Fisbct+MeUy8eoOi0kZ4y+LcqfLk14wX:FisbctxPeoOY4yEcqTe4

Score

N/A

Malware Config

Signatures

Files

ab8a8208ba0af3e7364aa23bbbd9652c0a60bc313384c9db2f84a8efb3f29b64
.exe windows x86

999835bc5cfee2f6fa0373dd718b4b9c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowOwnedPopups
EndDialog
AdjustWindowRectEx
GetDlgCtrlID
ShowWindow
DeferWindowPos
SetParent
GetWindow
DialogBoxParamA
DefDlgProcA
IsWindow
LoadIconA

advapi32

RegEnumValueA
RegOpenKeyA
RegConnectRegistryA
ReadEventLogA
OpenBackupEventLogA
RegOpenKeyExA
RegFlushKey
RegOverridePredefKey
OpenProcessToken
OpenThreadToken
AdjustTokenPrivileges
RegLoadKeyA

kernel32

ResetEvent
GetCPInfoExA
GetSystemDefaultLCID
GetCPInfo
InitializeCriticalSection
GetOEMCP
SetThreadLocale
GetStringTypeW
HeapFree
IsValidCodePage
CreateSemaphoreA
GetACP
GetPrivateProfileSectionA
GetPrivateProfileIntA
GetModuleHandleA
GetProcAddress
GetStdHandle
QueryPerformanceCounter
GetTickCount
GetCommandLineA
TlsSetValue
GetCurrentThreadId
SetHandleInformation
VirtualAlloc
TlsGetValue
GetCurrentProcess
GetCurrentProcessId
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentVariableA
GetProcessHeap

usp10

ScriptTextOut
ScriptCacheGetHeight
ScriptStringXtoCP
ScriptXtoCP
ScriptApplyLogicalWidth
ScriptJustify
ScriptCPtoX
ScriptGetLogicalWidths
ScriptItemize
ScriptLayout
ScriptString_pcOutChars
ScriptStringFree
ScriptBreak
ScriptGetProperties
ScriptString_pSize
ScriptPlace

msimg32

GradientFill
TransparentBlt
AlphaBlend

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 386KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

999835bc5cfee2f6fa0373dd718b4b9c

Headers

File Characteristics

Imports

user32

advapi32

kernel32

usp10

msimg32

msvcrt

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 528KB

.rsrc Size: 386KB - Virtual size: 386KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 528KB

.rsrc
Size: 386KB - Virtual size: 386KB

.reloc
Size: 3KB - Virtual size: 3KB