8d80767b6b0de3560f1a31e733d42574c179b475e6a64a9f9e2877597f9afebb

Sharing

Copy URL Twitter E-mail

General

Target

8d80767b6b0de3560f1a31e733d42574c179b475e6a64a9f9e2877597f9afebb
Size

1.1MB
MD5

99492e546e8c6bd4a9e5bf4a8d0d7404
SHA1

7177f78ab43d28ab8b5154b80240069dae24e17e
SHA256

8d80767b6b0de3560f1a31e733d42574c179b475e6a64a9f9e2877597f9afebb
SHA512

8f6f416d569badc32f70cbccc8d105d92eb25c1e7936bb9f3a391b581d07193f74bda8072280f78b2220b20df711d1646a34961c46ee4019e29fd9498a716993
SSDEEP

24576:h0L+USSD5m86b4KYDGYNfJ5kqQ9DFTFj8K+3WJLb4QTH89KJal+8aHdIHe+:h0L+7SD5T6b4KgNxQPTC1UXTHrJalxa2

Score

N/A

Malware Config

Signatures

Files

8d80767b6b0de3560f1a31e733d42574c179b475e6a64a9f9e2877597f9afebb
.exe windows x86

b7873342233a51a968c8c1f86e017f62

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
WideCharToMultiByte
MultiByteToWideChar
LocalFree
LocalAlloc
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
GetLastError
lstrlenW
GetModuleHandleW
GetWindowsDirectoryW
lstrcpynW
GetModuleFileNameW
GetTempPathA
GetSystemDirectoryW
DeleteFileA
GetWindowsDirectoryA
IsDBCSLeadByte
GetCPInfo
lstrcmpiA
CreateFileA
GetFileSize
MapViewOfFile
UnmapViewOfFile
CompareStringA
LocalReAlloc
IsDBCSLeadByteEx
IsValidCodePage
FindResourceExW
LoadResource
GetSystemDefaultLangID
lstrcmpA
lstrcmpiW
CreateMutexW
GetCommandLineW
GetStartupInfoA
UnhandledExceptionFilter
QueryPerformanceCounter
Sleep
DisableThreadLibraryCalls
GetModuleFileNameA
GetModuleHandleA
GetACP
WaitForSingleObject
CloseHandle
lstrlenA
FindFirstFileW
FindNextFileW
GetFileAttributesW
VerifyVersionInfoW
GetStdHandle
GetFileType
WriteConsoleW
GetConsoleOutputCP
FreeLibrary
SearchPathW
WriteFile
SetLastError

user32

LoadStringW
wsprintfW
GetDlgItem
GetPropA
SetPropA
SetDlgItemTextW
GetParent
MoveWindow
CharNextExA
wsprintfA
DialogBoxIndirectParamW
DialogBoxParamW
CharLowerA
GetTopWindow
GetForegroundWindow
GetSystemMetrics
GetDC
ReleaseDC

advapi32

RegCreateKeyExA
RegEnumKeyA
RegDeleteValueA
RegEnumValueW
RegEnumValueA
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegDeleteKeyW
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExW
RegDeleteKeyA
RegSetValueExA

ole32

CreateStreamOnHGlobal
CoTaskMemFree

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

msvcrt

puts
fwprintf
vswprintf
vfwprintf
fprintf
setlocale
strncpy
strrchr
strchr
atoi
strncmp
wcsstr
memmove
wcschr
malloc
exit
free
_getch

rpcrt4

RpcStringFreeW
RpcBindingFromStringBindingW
RpcBindingFree

Sections

.text
Size: 136KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7873342233a51a968c8c1f86e017f62

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

version

msvcrt

rpcrt4

Sections

.text Size: 136KB - Virtual size: 132KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 80KB - Virtual size: 2.2MB

.rsrc Size: 16KB - Virtual size: 13KB

.text
Size: 136KB - Virtual size: 132KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 80KB - Virtual size: 2.2MB

.rsrc
Size: 16KB - Virtual size: 13KB