8be655497ded041cc896788e543e5dad24a5dea518f9d869e376948b004c2e71

Sharing

Copy URL

Twitter E-mail

General

Target

8be655497ded041cc896788e543e5dad24a5dea518f9d869e376948b004c2e71
Size

103KB
MD5

af492f4985b1486f035a2199086921c3
SHA1

748a4865c24eb3c0e21a5b9e6e32a8f9ac2130f0
SHA256

8be655497ded041cc896788e543e5dad24a5dea518f9d869e376948b004c2e71
SHA512

7cb35416aa9e537438158acba7b2bbd9685466800bcfe99429b90e26d80eae598f89c3d8728118aa08e93cf372b0f8bf0c7e5249b695dee7d41506cfd161088a
SSDEEP

3072:DWw/LXWDZ+DxBNb1SpuxJqQRmxrXbLWGO:DWw/DW5uaQRQfY

Score

N/A

Malware Config

Signatures

Files

8be655497ded041cc896788e543e5dad24a5dea518f9d869e376948b004c2e71
.exe windows x86

2207440277c18e5ae4acffe02ea8cfbc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_BIND

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

kernel32

GetProfileStringA
GetModuleFileNameA
FileTimeToLocalFileTime
SetEnvironmentVariableA
CompareStringW
HeapReAlloc
HeapSize
LoadLibraryA
MultiByteToWideChar
LCMapStringW
Sleep
RtlUnwind
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetOEMCP
GetProcAddress
GetLastError
GetStdHandle
GetProfileIntA
FileTimeToSystemTime
SetConsoleMode
HeapCreate
GetFileAttributesA
CreateEventA
ReadConsoleInputA
GetSystemDirectoryW
SetEvent
HeapAlloc
FreeLibrary
GetNativeSystemInfo
GetStringTypeW
CreateFileA
GetACP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
HeapFree
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
GetModuleHandleW
ExitProcess
WriteFile
GetModuleFileNameW
WideCharToMultiByte
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree

user32

GetMenu
EndPaint
DestroyWindow
IsMenu
PostQuitMessage
wsprintfA
DialogBoxParamA
GetDC
IsDialogMessageA
BeginPaint
MessageBoxA
ReleaseDC
DefWindowProcA
SetWindowPos
GetMenuItemInfoA
EnumDesktopsA
CreateDialogParamW
GetSystemMetrics
SetWindowTextA
LoadImageA

gdi32

FrameRgn
CancelDC
GetTextExtentPoint32A
LineTo
DeleteDC
CreateFontIndirectA
GetDIBits
DeleteObject
SelectObject
SelectClipRgn
CreateCompatibleDC
CombineRgn
CreateCompatibleBitmap
GetTextMetricsA
CreateSolidBrush
CreateEllipticRgn

shell32

SHParseDisplayName

ole32

CoInitialize

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2207440277c18e5ae4acffe02ea8cfbc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

setupapi

Sections

.text Size: 31KB - Virtual size: 30KB

.rdata Size: 31KB - Virtual size: 30KB

.data Size: 16KB - Virtual size: 19KB

.rsrc Size: 24KB - Virtual size: 24KB

.text
Size: 31KB - Virtual size: 30KB

.rdata
Size: 31KB - Virtual size: 30KB

.data
Size: 16KB - Virtual size: 19KB

.rsrc
Size: 24KB - Virtual size: 24KB