0f79254f95d34201e91de9c24f8e9951[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

0f79254f95d34201e91de9c24f8e9951.exe
Size

198KB
MD5

0f79254f95d34201e91de9c24f8e9951
SHA1

f95e4346323dd9f346c404dc0437b1670dffee0d
SHA256

4d8c71a8d708d07c00c7af6f4cd74ef4879a9ccad8b2088cb7256e81f269ac3a
SHA512

615fa6ea4c431b5f705d529ff3c2b46b9c7f3b1d9954e139e1b8beb4c178b057a2b0bf4c02a6d0539c599b57f5464bef9b64ef6d694a7141f3a01cca9ac81020
SSDEEP

3072:pHXtON6o/Ev4rxVyJdICg1TxGVGJw04FDeinuMtRc2hmKsxv:po/EvQ5CkTxr4FDeiuT2bsxv

Score

N/A

Malware Config

Signatures

Files

0f79254f95d34201e91de9c24f8e9951.exe
.exe windows x86

8c8508edec1c956004908c27f8edc2f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
MultiByteToWideChar
ReadConsoleW
SetInformationJobObject
VerLanguageNameW
SetFileValidData
LockFile
InitializeCriticalSection
GetFileSize
GetPriorityClass
WriteConsoleOutputCharacterW
AreFileApisANSI
GetThreadPriority
CreateEventW
GetNativeSystemInfo
SetEndOfFile
GetTapeParameters
FreeConsole
lstrcmpW
AssignProcessToJobObject
DeleteAtom
GetLogicalDrives
AddAtomW
GetCurrentProcessId
GetNumaNodeProcessorMask
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
HeapSize
HeapReAlloc
GetProcAddress
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
DeleteCriticalSection
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
InterlockedDecrement
GetLastError
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
GetCommandLineA
RaiseException
RtlUnwind
VirtualAlloc
Sleep

user32

UnregisterClassA
CheckRadioButton
IsWindow
GetSystemMetrics
EnableWindow
GetWindowTextA
RedrawWindow
FindWindowA
SetWindowPos
wvsprintfA
GetWindowLongA
SetCursor
GetSysColorBrush
DialogBoxParamA
DestroyAcceleratorTable
DispatchMessageA
TranslateMessage
LoadIconA
SetClipboardData
SetFocus
CharUpperA
OpenClipboard
IsDialogMessageA
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
RemoveMenu
InvalidateRect
ChildWindowFromPoint
PostMessageA
DestroyCursor
CreateDialogParamA
GetWindowRect
IsMenu
GetSubMenu
SetDlgItemInt
GetWindowPlacement
CharLowerBuffA
EnableMenuItem
CheckMenuRadioItem
GetSysColor
KillTimer
DestroyIcon
DestroyWindow
PostQuitMessage
GetClientRect
MoveWindow
GetSystemMenu
SetTimer
SetWindowPlacement
InsertMenuItemA
GetMenu
CheckMenuItem
SetMenuItemInfoA
SetActiveWindow
DefDlgProcA
RegisterClassA
EndDialog
SetDlgItemTextA
EnumClipboardFormats
GetClipboardData
CloseClipboard
GetClassInfoA
CallWindowProcA
SetWindowLongA
IsDlgButtonChecked
SetWindowTextA
CheckDlgButton
GetActiveWindow
LoadCursorA
MessageBoxA
wsprintfA
GetDlgItemTextA
SendMessageA
GetCursorPos
TrackPopupMenu
ClientToScreen
DestroyMenu
CreatePopupMenu
AppendMenuA
SendDlgItemMessageA
GetDlgItem
EmptyClipboard

advapi32

DecryptFileW

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c8508edec1c956004908c27f8edc2f4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 73KB - Virtual size: 72KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 97KB - Virtual size: 100KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 73KB - Virtual size: 72KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 97KB - Virtual size: 100KB

.rsrc
Size: 10KB - Virtual size: 9KB