b779e354e0b2bd26e64ae309a104fb296f635ae7f6f99dd64c27a6199d6e2c5c

General

Target

b779e354e0b2bd26e64ae309a104fb296f635ae7f6f99dd64c27a6199d6e2c5c
Size

425KB
MD5

d40a0eee8335f07952844606425e8cef
SHA1

198a5a35b1d6fc9b90d015349f8e26182332b113
SHA256

b779e354e0b2bd26e64ae309a104fb296f635ae7f6f99dd64c27a6199d6e2c5c
SHA512

f5edca7225fefd44f656f4090b0e53115e89c4420c71aaa7dede7074664111b309341c52c0cce493d303efd9ffc82137189a8d00878a788e1803fbf25e82193e
SSDEEP

12288:/H8OyEWiem8Rk9u5ov3eK7fZBw+lJ/BxzooFxyAZ:kOv6m8u9u5I39kiJJxzo8z

Score

N/A

Malware Config

Signatures

Files

b779e354e0b2bd26e64ae309a104fb296f635ae7f6f99dd64c27a6199d6e2c5c
.exe windows x86

1a9827d744c32c76ade9f8e546a48a42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

EnumEnhMetaFile
GetTextExtentPointA

advapi32

ObjectCloseAuditAlarmW
InitiateSystemShutdownW
AbortSystemShutdownW
GetLengthSid
CryptGetProvParam
RegQueryInfoKeyW
LookupAccountSidA
SetKernelObjectSecurity
BuildTrusteeWithNameW
AdjustTokenPrivileges
StartServiceW
CreateProcessAsUserW
GetAce
DestroyPrivateObjectSecurity
IsValidAcl
RegOpenKeyA

kernel32

FileTimeToSystemTime
InterlockedExchangeAdd
GetTempFileNameA
CreateMutexW
LocalUnlock
GetPrivateProfileSectionNamesA
GetNumberFormatW
BackupRead
GetFileAttributesA
GetSystemDirectoryA
WriteConsoleInputA
GetCurrentThreadId
UpdateResourceA
InterlockedExchange
QueueUserAPC

user32

GetUserObjectInformationA
DrawTextA
EnumDisplayDevicesA
SendNotifyMessageW
GetMessageA
DispatchMessageW
PeekMessageW
AppendMenuW
OpenClipboard
IsDialogMessageA
GetMessageW
UnhookWinEvent
mouse_event
ToUnicode
CheckMenuRadioItem
ToUnicodeEx
EmptyClipboard
FlashWindowEx
WinHelpA
BeginDeferWindowPos
ScrollWindow
ChangeMenuA
wvsprintfA
SetWindowsHookExA
UnregisterHotKey
SetWindowPos
GetWindowWord
GetCaretPos
IsZoomed
GetMessageExtraInfo
GetClipboardFormatNameA
ShowCaret
CloseWindow

shell32

ExtractIconExW
SHFileOperationW
SHGetPathFromIDListW
Shell_NotifyIconA

Sections

.text
Size: 42KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 368KB - Virtual size: 367KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1a9827d744c32c76ade9f8e546a48a42

Headers

File Characteristics

Imports

gdi32

advapi32

kernel32

user32

shell32

Sections

.text Size: 42KB - Virtual size: 352KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 368KB - Virtual size: 367KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 42KB - Virtual size: 352KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 368KB - Virtual size: 367KB

.rsrc
Size: 10KB - Virtual size: 9KB