b6c6b0883720d36656ead9b827832242a1a86a7354c69c32f9f61e2b157f7ac6

Sharing

Copy URL Twitter E-mail

General

Target

b6c6b0883720d36656ead9b827832242a1a86a7354c69c32f9f61e2b157f7ac6
Size

217KB
MD5

0e82cbf19f5cc218aa195f5d5ae4ffd7
SHA1

1a8857bb1cd1586c84f8e992a7b05192fa69a189
SHA256

b6c6b0883720d36656ead9b827832242a1a86a7354c69c32f9f61e2b157f7ac6
SHA512

cafdbba06ea268ab8831c9507f7c04d22a9dfe828af848c3ce44f970ef0d28ad98abf7aeb3964cd88b7197c0344ef6c1b1bfe096db444d0f6d450b815dce2f58
SSDEEP

3072:M9PkrQ3qKG12Aa+u5/GGrgQ2TrhzWiQmzV50qAnz4Wa2vLsNouaiUZO:kAv7yXg5zWiNzV50XwaY

Score

N/A

Malware Config

Signatures

Files

b6c6b0883720d36656ead9b827832242a1a86a7354c69c32f9f61e2b157f7ac6
.exe windows x86

b0e8d18bdc7cd53622a4450a345fc71f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLangID
lstrcatW
GetModuleHandleA
SetEvent
SetLocaleInfoW
GetCommandLineA
GetCalendarInfoA
AddAtomA
GetSystemInfo
GetNamedPipeInfo
GetProcAddress
GetAtomNameA
ConnectNamedPipe
GetWindowsDirectoryW
FlushFileBuffers
CreateFileMappingA
GetVersionExA
GlobalDeleteAtom
CompareFileTime
GetCurrentThreadId
GetStartupInfoW
EndUpdateResourceA
CreateEventW
CreateEventA
GetThreadPriority
RaiseException
GetStartupInfoA
SetCurrentDirectoryW

user32

CreateDesktopW
wvsprintfA
InvalidateRgn
FillRect
GetWindowTextW
SetFocus
GetWindowLongA
GetKeyState
GetWindowLongW
CreateAcceleratorTableA
LoadMenuW
GetMenuStringA
LoadCursorA
GetClassLongW
InsertMenuA
CreateWindowExW
MonitorFromRect
GetMenuItemInfoW
GetMenuItemRect
SetTimer
CreateDesktopA
GetSubMenu
GetClientRect
CreateWindowExA
AppendMenuA
GetClassInfoExA
GetWindowTextA
EnumDesktopsW
CreateMenu
OffsetRect
MessageBoxIndirectA
GetDlgItemTextW
LoadIconA
CloseWindow
BringWindowToTop
DeleteMenu

gdi32

GetCurrentObject
SelectPalette
CreateDCA
GetDeviceCaps
SetTextCharacterExtra
GetViewportExtEx
GetViewportOrgEx
SetBitmapDimensionEx
GetStretchBltMode
GetEnhMetaFileW
EnumICMProfilesA
EnumICMProfilesW
CreateEllipticRgn

advapi32

RegReplaceKeyW
RegOpenKeyA
RegQueryValueA
RegEnumValueW

shell32

SHGetFileInfoA

shlwapi

StrNCatA
StrCSpnW
SHRegSetPathW
SHRegDeleteUSValueW
SHSetValueW
SHDeleteOrphanKeyA

urlmon

FindMediaType
CreateAsyncBindCtxEx
HlinkNavigateMoniker
FindMediaTypeClass

winmm

midiOutReset
waveInGetErrorTextW
midiInMessage

winspool.drv

StartDocPrinterW

oledlg

OleUICanConvertOrActivateAs
OleUIUpdateLinksW
OleUIChangeSourceW
OleUIChangeIconA
OleUIChangeIconW

Sections

.jYaR
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.S
Size: 2KB - Virtual size: 401KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.otzqc
Size: 3KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NF
Size: 3KB - Virtual size: 389KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.KWhBLJ
Size: 4KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.IpvXT
Size: 2KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gr
Size: 1KB - Virtual size: 470KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msK
Size: 1KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.FSBjwB
Size: 1024B - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Ph
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.HyH
Size: 1KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.z
Size: 2KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wW
Size: 4KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 942B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0e8d18bdc7cd53622a4450a345fc71f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

urlmon

winmm

winspool.drv

oledlg

Sections

.jYaR Size: 11KB - Virtual size: 11KB

.S Size: 2KB - Virtual size: 401KB

.otzqc Size: 3KB - Virtual size: 26KB

.NF Size: 3KB - Virtual size: 389KB

.KWhBLJ Size: 4KB - Virtual size: 324KB

.IpvXT Size: 2KB - Virtual size: 201KB

.gr Size: 1KB - Virtual size: 470KB

.msK Size: 1KB - Virtual size: 440KB

.FSBjwB Size: 1024B - Virtual size: 423KB

.Ph Size: 8KB - Virtual size: 8KB

.HyH Size: 1KB - Virtual size: 347KB

.z Size: 2KB - Virtual size: 238KB

.wW Size: 4KB - Virtual size: 315KB

.rsrc Size: 168KB - Virtual size: 168KB

.reloc Size: 1024B - Virtual size: 942B

.jYaR
Size: 11KB - Virtual size: 11KB

.S
Size: 2KB - Virtual size: 401KB

.otzqc
Size: 3KB - Virtual size: 26KB

.NF
Size: 3KB - Virtual size: 389KB

.KWhBLJ
Size: 4KB - Virtual size: 324KB

.IpvXT
Size: 2KB - Virtual size: 201KB

.gr
Size: 1KB - Virtual size: 470KB

.msK
Size: 1KB - Virtual size: 440KB

.FSBjwB
Size: 1024B - Virtual size: 423KB

.Ph
Size: 8KB - Virtual size: 8KB

.HyH
Size: 1KB - Virtual size: 347KB

.z
Size: 2KB - Virtual size: 238KB

.wW
Size: 4KB - Virtual size: 315KB

.rsrc
Size: 168KB - Virtual size: 168KB

.reloc
Size: 1024B - Virtual size: 942B