8fabf6064b780591ec53777783858b244d1ad975d166b14fadbe51eeb818fc2d

Sharing

Copy URL Twitter E-mail

General

Target

8fabf6064b780591ec53777783858b244d1ad975d166b14fadbe51eeb818fc2d
Size

189KB
MD5

04c8f80036a362ee8462e5c3d69dc22d
SHA1

18b571619243c6bb4d19ab26a1f72ef9c897693f
SHA256

8fabf6064b780591ec53777783858b244d1ad975d166b14fadbe51eeb818fc2d
SHA512

538b71ce0a317108a4dd70eaf2e76654ecbe26050da04b0eec7599542717f007069adc3f0e6b6206dc8917f24dfdbf822c62c15801ad3ef560599c6db56ab4e9
SSDEEP

3072:mx86T+SB8bOIU+xUzVohdhkbuFAN48nNzZMTey8oIjWe/0kwpr1:rAhzVohvkbuOpjseyKn/+pr

Score

N/A

Malware Config

Signatures

Files

8fabf6064b780591ec53777783858b244d1ad975d166b14fadbe51eeb818fc2d
.exe windows x86

ca2bbbd2afcae8c7d56f16402dbff5e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Heap32ListFirst
IsBadCodePtr
GetPrivateProfileStructA
FindAtomA
OpenEventA
GetSystemDefaultLangID
GetThreadContext
EndUpdateResourceA
GetFullPathNameA
EnumUILanguagesA
OpenWaitableTimerA
EscapeCommFunction
LocalCompact
GetOverlappedResult
GetSystemTimeAsFileTime
GetFileAttributesExA
ResetEvent
SetPriorityClass
LZOpenFileA
CreateTimerQueue
GetConsoleCursorMode
VirtualAlloc
MapViewOfFile
GetPriorityClass
SetThreadExecutionState
RemoveDirectoryA
TermsrvAppInstallMode
lstrcpy
GetProcessPriorityBoost
GetWindowsDirectoryA
CreateNamedPipeA
Module32First
GetSystemTime
GetConsoleAliasesLengthW
VirtualAllocEx
UnlockFile
GetConsoleAliasExesLengthA
GetTickCount
EnumSystemCodePagesA
ExitThread
GetPrivateProfileSectionNamesA
GlobalFlags
GetDiskFreeSpaceExA
GetWindowsDirectoryA
RegisterWaitForInputIdle
HeapFree
GetShortPathNameA
GetConsoleCommandHistoryLengthW
CreateSemaphoreA
WriteConsoleInputA
GetLastError
IsValidLanguageGroup
SetFileAttributesA
GetTimeFormatA
GetVolumePathNameA
GetEnvironmentVariableA
WriteConsoleOutputCharacterA
MapViewOfFileEx
GetConsoleInputWaitHandle
ReadConsoleInputA
WriteConsoleOutputA
DeleteTimerQueueTimer

ws2_32

WSARecv

ntdll

wcscat

imagehlp

CheckSumMappedFile

user32

PrivateExtractIconsA
SetScrollInfo
ActivateKeyboardLayout
SetDoubleClickTime
MessageBoxIndirectA
EnableMenuItem
TrackPopupMenuEx
EnumWindows
SetKeyboardState
EnumDisplaySettingsExA
EnumDisplaySettingsA
GetMenuItemID
IsHungAppWindow
CliImmSetHotKey
EnumWindows
QuerySendMessage
RegisterShellHookWindow
UnhookWindowsHookEx
GetKeyboardLayoutList
GetDlgItemInt
EnumClipboardFormats
GetClassInfoExA
SetCaretBlinkTime
GetListBoxInfo
GetWindowModuleFileNameA
GetMenuCheckMarkDimensions
UnregisterUserApiHook
GetMenu
GetClassInfoExW
AdjustWindowRectEx
LoadBitmapA

advapi32

CredDeleteA

opengl32

glMap2d
glEvalMesh1
glMap1d
glTexCoord2i

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca2bbbd2afcae8c7d56f16402dbff5e3

Headers

File Characteristics

Imports

kernel32

ws2_32

ntdll

imagehlp

user32

advapi32

opengl32

Sections

.text Size: 2KB - Virtual size: 1KB

.data Size: 182KB - Virtual size: 181KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 2KB - Virtual size: 1KB

.data
Size: 182KB - Virtual size: 181KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB