7806e808805eae825e4b2e560d1fd732f5b6fd92b9ac15994adbcf22af4f8b05

Sharing

Copy URL Twitter E-mail

General

Target

7806e808805eae825e4b2e560d1fd732f5b6fd92b9ac15994adbcf22af4f8b05
Size

512KB
MD5

0fc288e67621555193cd8cf88b98baef
SHA1

27e39da15379ae43294befff1dd972bfaa340880
SHA256

7806e808805eae825e4b2e560d1fd732f5b6fd92b9ac15994adbcf22af4f8b05
SHA512

1b8113002e7fc48001b45b2f260e1c67fdc071b6bbf5fc3c1d6aaf1f58ca2edb3e76b543f8cb02d3e4fa80b32abb6b2c2d1b3ee063e75a68d21dcf0d3ea8d648
SSDEEP

3072:IhhhvCCGMCViqoSLuNZIwcWEmvSj9cXGCNzTZJpJXsa028m:WLBD7cWZvocvJ3Jn8m

Score

N/A

Malware Config

Signatures

Files

7806e808805eae825e4b2e560d1fd732f5b6fd92b9ac15994adbcf22af4f8b05
.exe windows x86

b2f26ff31355b25803280537c9c6accd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetModuleFileNameA
WinExec
lstrcpynA
CreateProcessA
lstrcpyA
lstrlenA
Sleep
LoadLibraryA
GetVersion
GetCommandLineA
CloseHandle
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetFilePointer
GetLastError
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetProcAddress
FreeLibrary
ExitProcess
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
GetModuleHandleA
GetStartupInfoA
UnhandledExceptionFilter
HeapSize
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess

user32

EnableMenuItem
CheckMenuItem
InsertMenuA
CreateMenu
AppendMenuA
LoadStringA
DestroyMenu
DeleteMenu
GetMenuItemCount
KillTimer
SetTimer
DestroyIcon
LoadMenuA
SendMessageA
PostQuitMessage
DefWindowProcA
GetCursorPos
SetForegroundWindow
TrackPopupMenu
PostMessageA
FindWindowA
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
DispatchMessageA
TranslateMessage
MessageBoxA
GetSubMenu

gdi32

GetStockObject

advapi32

RegOpenKeyExA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
CloseServiceHandle
OpenSCManagerA
RegCloseKey

shell32

Shell_NotifyIconA

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nrdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b2f26ff31355b25803280537c9c6accd

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 40KB - Virtual size: 38KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 19KB

.rsrc Size: 12KB - Virtual size: 12KB

.nrdata Size: 80KB - Virtual size: 80KB

.text
Size: 40KB - Virtual size: 38KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 19KB

.rsrc
Size: 12KB - Virtual size: 12KB

.nrdata
Size: 80KB - Virtual size: 80KB