8f8a5260f05bc7ba211c8de989b999faceda8c9db1d5f00e1dc2bf968f3b0e19

Sharing

Copy URL Twitter E-mail

General

Target

8f8a5260f05bc7ba211c8de989b999faceda8c9db1d5f00e1dc2bf968f3b0e19
Size

268KB
MD5

a3f3b3be2d9f0f58940eace67c18824a
SHA1

962ff284943932212be64fb1cf50333b967a5bbd
SHA256

8f8a5260f05bc7ba211c8de989b999faceda8c9db1d5f00e1dc2bf968f3b0e19
SHA512

8361b748a60cc51d88e3a92ea24a050c9f73d8895a745a7169bb70cc6626bac0ace8381d61e19eb3bdcbde6ef3d23f26d5f8ae28cfff88e602951f5cc02077c0
SSDEEP

6144:GcW4I8upYtBkpbZ+REUraC6ShGOmKpEMEA+G:GUI9WBS+DrflGOmUh

Score

N/A

Malware Config

Signatures

Files

8f8a5260f05bc7ba211c8de989b999faceda8c9db1d5f00e1dc2bf968f3b0e19
.dll windows x86

c8e74a361b67e0efbb5444454d69c263

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

user32

SetCapture

comctl32

ImageList_Create
ImageList_GetBkColor
ImageList_Remove
ImageList_DragShowNolock
ImageList_Write
ImageList_Destroy
ImageList_Draw
ImageList_Add

advapi32

RegCreateKeyExA
RegOpenKeyA
RegQueryValueA
RegDeleteKeyA

shlwapi

PathIsDirectoryA
PathIsContentTypeA
SHQueryValueExA
SHEnumValueA
SHSetValueA
SHDeleteValueA
SHGetValueA
SHStrDupA
SHQueryInfoKeyA

gdi32

RestoreDC
SelectPalette
BitBlt
GetPixel
GetDCOrgEx
GetDIBColorTable

kernel32

VirtualAlloc
GetModuleHandleW
ExitProcess
LoadLibraryExA
SetErrorMode
SetFilePointer
ExitThread
GetLastError
ResetEvent
GetProcAddress
ReadFile
SetEndOfFile
GetModuleHandleA
GetOEMCP
SetEvent
IsBadReadPtr
GetACP
SetHandleCount

shell32

SHGetFileInfoA
SHGetDiskFreeSpaceA
SHFileOperationA
DragQueryFileA
SHGetSpecialFolderLocation

Sections

CODE
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 875B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hdata
Size: 4KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8e74a361b67e0efbb5444454d69c263

Headers

File Characteristics

Imports

version

user32

comctl32

advapi32

shlwapi

gdi32

kernel32

shell32

Sections

CODE Size: 60KB - Virtual size: 57KB

.rdata Size: 4KB - Virtual size: 875B

.data Size: 172KB - Virtual size: 169KB

.hdata Size: 4KB - Virtual size: 65KB

DATA Size: 12KB - Virtual size: 8KB

.adata Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 772B

.reloc Size: 4KB - Virtual size: 1KB

CODE
Size: 60KB - Virtual size: 57KB

.rdata
Size: 4KB - Virtual size: 875B

.data
Size: 172KB - Virtual size: 169KB

.hdata
Size: 4KB - Virtual size: 65KB

DATA
Size: 12KB - Virtual size: 8KB

.adata
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 772B

.reloc
Size: 4KB - Virtual size: 1KB