8cb4db6580dde016cdeab7562a125bfdc1b379aebcceee1cf0fb2fb6df534dae

Sharing

Copy URL Twitter E-mail

General

Target

8cb4db6580dde016cdeab7562a125bfdc1b379aebcceee1cf0fb2fb6df534dae
Size

195KB
MD5

b38bfa73ce3f1dce8f1abbd071342dfb
SHA1

b9bb86b8e93ab33d0ecef06aaa3cff64e26cba25
SHA256

8cb4db6580dde016cdeab7562a125bfdc1b379aebcceee1cf0fb2fb6df534dae
SHA512

413e64152c9d2a04fae8f71d89936bc93dab39f4e5874ee7ebb14a9a5e935430050c1add5886893d6913190cc2e65c90fde2727295ce3b0ac116187b69bc6d0d
SSDEEP

1536:yJ5LNMzs9wuj0H8xqWTaFWoYHTzmELGVOMrxd5AtTO2MwuF6tMK6rwTceJSvcqy7:0B9v+8tAoXmIMdet37uFAMBbMviw5

Score

N/A

Malware Config

Signatures

Files

8cb4db6580dde016cdeab7562a125bfdc1b379aebcceee1cf0fb2fb6df534dae
.exe windows x86

fdfc1e6478a1a2ef01c9e67af8c90a42

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VerifyVersionInfoW
VerSetConditionMask
UnhandledExceptionFilter
TerminateProcess
SetUnhandledExceptionFilter
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetModuleHandleA
GetLastError
GetFullPathNameW
GetCurrentProcess
FormatMessageW
VirtualAlloc
GetCurrentThreadId
GetCommandLineA
LoadLibraryA
GetProcAddress

user32

GetMenuItemCount
DestroyMenu
GetDlgCtrlID
GetMenuCheckMarkDimensions
GetSysColor
IsCharAlphaNumericA
CountClipboardFormats
GetKeyboardLayout
GetKBCodePage
GetDlgItem
GetShellWindow
IsCharUpperW
ShowCaret
CloseDesktop
GetAsyncKeyState
CloseClipboard
IsCharAlphaNumericW
LoadIconW
GetDC
IsWindowEnabled
GetCaretBlinkTime
CloseWindow
CreatePopupMenu
GetWindowContextHelpId
DestroyWindow
GetClipboardViewer
GetMenu
IsGUIThread
EnableMenuItem
GetParent
GetKeyState

gdi32

GetDCPenColor
SaveDC
CreatePatternBrush
GetTextColor
PathToRegion
GetEnhMetaFileW
GetROP2
GetPolyFillMode
CreateHalftonePalette
GdiFlush
AddFontResourceA
GetStretchBltMode
CreateMetaFileA
GetColorSpace
RealizePalette
FillPath
CreateCompatibleDC
GetMapMode
DeleteDC
UpdateColors

advapi32

RegConnectRegistryW
RegOpenKeyExA
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW

ole32

CoUninitialize
CoInitializeSecurity
CoInitializeEx
CoCreateInstance

msvcrt

wprintf
wcslen
wcscpy
swscanf
memcpy
memset
_CxxThrowException
_XcptFilter
__CxxFrameHandler
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_wcsicmp
exit
free
malloc
memmove

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fdfc1e6478a1a2ef01c9e67af8c90a42

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

msvcrt

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 147KB - Virtual size: 147KB

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 147KB - Virtual size: 147KB

.rsrc
Size: 16KB - Virtual size: 15KB