db8a51633e5400fa5e7767af1aaa4bbbad053b9eb682a9fb990d179d3780836b

Sharing

Copy URL

Twitter E-mail

General

Target

db8a51633e5400fa5e7767af1aaa4bbbad053b9eb682a9fb990d179d3780836b
Size

400KB
MD5

07b7405c29766fffec41adc50ea0d1f8
SHA1

a5e0f1d3f4349c97c228a3337d85ffc2345adad6
SHA256

db8a51633e5400fa5e7767af1aaa4bbbad053b9eb682a9fb990d179d3780836b
SHA512

5ed6069e1b50ed237c98a9cd5b4a1f5dad9d1a5bffb6bc4a2564c6b517e2b53fe268d142054772259dc6c2b3d04cf2dacd8b51c502cc25698ea4ba1b9d856551
SSDEEP

12288:w6O5EyYxF/EbSGSF8KQmkcjJUU69nTvnOF:pGEbxZnQf5U69nr

Score

N/A

Malware Config

Signatures

Files

db8a51633e5400fa5e7767af1aaa4bbbad053b9eb682a9fb990d179d3780836b
.exe windows x86

e26481a77306ea2b3c0d6eddd07a57f9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowOwnedPopups
EndDialog
AdjustWindowRectEx
GetDlgCtrlID
ShowWindow
DeferWindowPos
SetParent
GetWindow
DialogBoxParamA
DefDlgProcA
IsWindow
LoadIconA

advapi32

RegEnumValueA
RegOpenKeyA
RegConnectRegistryA
ReadEventLogA
OpenBackupEventLogA
RegOpenKeyExA
RegFlushKey
RegOverridePredefKey
OpenProcessToken
OpenThreadToken
AdjustTokenPrivileges
RegLoadKeyA

kernel32

ResetEvent
GetCPInfoExA
GetSystemDefaultLCID
GetCPInfo
InitializeCriticalSection
GetOEMCP
SetThreadLocale
GetStringTypeW
HeapFree
IsValidCodePage
CreateSemaphoreA
GetACP
GetPrivateProfileSectionA
GetPrivateProfileIntA
GetModuleHandleA
GetProcAddress
GetStdHandle
QueryPerformanceCounter
GetTickCount
GetCommandLineA
TlsSetValue
GetCurrentThreadId
SetHandleInformation
VirtualAlloc
TlsGetValue
GetCurrentProcess
GetCurrentProcessId
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentVariableA
GetProcessHeap

usp10

ScriptTextOut
ScriptCacheGetHeight
ScriptStringXtoCP
ScriptXtoCP
ScriptApplyLogicalWidth
ScriptJustify
ScriptCPtoX
ScriptGetLogicalWidths
ScriptItemize
ScriptLayout
ScriptString_pcOutChars
ScriptStringFree
ScriptBreak
ScriptGetProperties
ScriptString_pSize
ScriptRecordDigitSubstitution

msimg32

GradientFill
TransparentBlt
AlphaBlend

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 383KB - Virtual size: 382KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e26481a77306ea2b3c0d6eddd07a57f9

Headers

File Characteristics

Imports

user32

advapi32

kernel32

usp10

msimg32

msvcrt

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 528KB

.rsrc Size: 383KB - Virtual size: 382KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 528KB

.rsrc
Size: 383KB - Virtual size: 382KB

.reloc
Size: 3KB - Virtual size: 3KB