f8dd29d7726bfaee92c77e1cbbb0215df14f5d5c6971aee6cf16729f4095cc00

Sharing

Copy URL Twitter E-mail

General

Target

f8dd29d7726bfaee92c77e1cbbb0215df14f5d5c6971aee6cf16729f4095cc00
Size

293KB
MD5

3b0f799c7e38ad39639b81b5ae71e080
SHA1

56cd4d5528bf86c2cc3212d23898ea3121de50dd
SHA256

f8dd29d7726bfaee92c77e1cbbb0215df14f5d5c6971aee6cf16729f4095cc00
SHA512

26770772a6f29cee58941f8c70cb17de352f207bb1323937d3701e80e19a1d7ae100eaffd75f6545ce2882c6f828e9e8b9b40c84438f72c76b01827772555487
SSDEEP

6144:wbO9qUvUSCnhdAlpnRsQPVIhJjyMj4eoz2mpDQGqDW:wUv/yelpnRnV+csoz2mpD6DW

Score

N/A

Malware Config

Signatures

Files

f8dd29d7726bfaee92c77e1cbbb0215df14f5d5c6971aee6cf16729f4095cc00
.exe windows x86

8250980d0d37dc8807c09df47dd0530a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW
LoadStringW
wsprintfW

msvcr100

_onexit
_invoke_watson
_controlfp_s
__dllonexit
_unlock
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__set_app_type
??2@YAPAXI@Z
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
?terminate@@YAXXZ
memcpy
_vsnwprintf_s
_ftime64_s
wcsftime
_snwprintf_s
_localtime64
wcsncpy_s
_wstat64i32
wcscat_s
memcpy_s
_wsplitpath_s
wcscpy_s
_wtoi
memset
swprintf_s
??_U@YAPAXI@Z
__CxxFrameHandler3
??3@YAXPAX@Z
_stat64i32
_CxxThrowException
malloc
??_V@YAXPAX@Z
free
_lock

kernel32

GetLastError
LocalFree
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
RaiseException
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
EncodePointer
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentThreadId
GetCurrentProcessId
OutputDebugStringW
GetShortPathNameW
LocalAlloc
lstrlenW
WaitForSingleObject
CreateProcessW
GetSystemDirectoryW
CreateFileW
GetNativeSystemInfo
GetCurrentProcess
GetVersionExW
GlobalMemoryStatusEx
InterlockedIncrement
GetModuleHandleW
GetModuleFileNameW
GetLongPathNameW
LoadLibraryW
GetProcAddress
FreeLibrary
CloseHandle
InterlockedDecrement
FormatMessageW
GetEnvironmentVariableW
GetWindowsDirectoryW
LoadLibraryA

ole32

CoTaskMemFree
StringFromCLSID

oleaut32

SysStringLen
SysAllocStringByteLen
SysAllocString
VariantClear
SysFreeString

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 236KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8250980d0d37dc8807c09df47dd0530a

Headers

DLL Characteristics

File Characteristics

Imports

user32

msvcr100

kernel32

ole32

oleaut32

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 32KB - Virtual size: 32KB

.reloc Size: 236KB - Virtual size: 396KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 32KB - Virtual size: 32KB

.reloc
Size: 236KB - Virtual size: 396KB