8b8023dc78fe079afee97c9e445d94649e732acadea71690c0bfb7984e60a74d

Sharing

Copy URL Twitter E-mail

General

Target

8b8023dc78fe079afee97c9e445d94649e732acadea71690c0bfb7984e60a74d
Size

158KB
MD5

abba9f5fc32e7f844aae0c3e9753770c
SHA1

27edcea0c5d95642de51b188e2d51f2e8b00d3e0
SHA256

8b8023dc78fe079afee97c9e445d94649e732acadea71690c0bfb7984e60a74d
SHA512

6b1cf560d364392c6c6be66a822b9873b5cbebc41fbb68088f9cadc6e606ee98ac431a81cfc19cdbdbf63f9dbc0f180589e962c1c82a05b6a7cf90de8747ab06
SSDEEP

3072:w5swBLYFat4Vu9isWVVE2uOJW9f97IFIe5a4cZOP/luKd92:YZj9EU2N8f9beTv/vd

Score

N/A

Malware Config

Signatures

Files

8b8023dc78fe079afee97c9e445d94649e732acadea71690c0bfb7984e60a74d
.exe windows x86

cac16d11c7c57925b6a32e47e7f17440

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

OffsetRect
DefFrameProcW
GetWindowDC
IsDlgButtonChecked
EnumThreadWindows
SendMessageW
GetKeyboardLayoutNameW
RemoveMenu
GetClipCursor
IsCharAlphaNumericA
DefWindowProcW
GrayStringW
SetWindowLongA
SendNotifyMessageW
GetClassLongW
VkKeyScanW
ShowWindowAsync

ole32

CoGetCurrentProcess
CoInitialize

gdi32

GetTextExtentPointA
Rectangle
SetBitmapBits
GetTextExtentPoint32W
IntersectClipRect
GetLayout

rpcrt4

CreateProxyFromTypeInfo
CreateStubFromTypeInfo

kernel32

DuplicateHandle
lstrcatA
CreateEventW
GlobalAlloc
GetSystemTime
lstrlenA
SetFileAttributesA
CreateMailslotW
VirtualFree
CopyFileW
InitializeCriticalSection
GlobalUnlock
VerifyVersionInfoW
GetThreadLocale
MapViewOfFile
CopyFileA

Exports

Exports

ValidateWidthOld

Sections

.text
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Agio
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.oypac
Size: 512B - Virtual size: 453B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jibmed
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cac16d11c7c57925b6a32e47e7f17440

Headers

DLL Characteristics

File Characteristics

Imports

user32

ole32

gdi32

rpcrt4

kernel32

Exports

Exports

Sections

.text Size: 125KB - Virtual size: 125KB

.Agio Size: 4KB - Virtual size: 7KB

.oypac Size: 512B - Virtual size: 453B

.jibmed Size: 22KB - Virtual size: 22KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 125KB - Virtual size: 125KB

.Agio
Size: 4KB - Virtual size: 7KB

.oypac
Size: 512B - Virtual size: 453B

.jibmed
Size: 22KB - Virtual size: 22KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 4KB - Virtual size: 3KB