b8498ddc0b9579769fd5041176772b820c60eed752a0f327cd4ba727c106fabe

Sharing

Copy URL Twitter E-mail

General

Target

b8498ddc0b9579769fd5041176772b820c60eed752a0f327cd4ba727c106fabe
Size

716KB
MD5

335af4b34d117b5af1978ceab7fed400
SHA1

2f3080fe6a8cda0d9aca1a6722e925a24ed325d6
SHA256

b8498ddc0b9579769fd5041176772b820c60eed752a0f327cd4ba727c106fabe
SHA512

846a74e4a1d08274c1d461441c6dff79facb2ebf32af70c75dff068915f9355cf4810653603e9ec31c881e65f3742a5351651d50069c7b76192152659ff53785
SSDEEP

12288:xKjyax0BMGt5aHW93ACMITQeN/7YkrWBfWhvRhQUZQPn:xcHW93ACjTQeN/7DSBfWhZWn

Score

N/A

Malware Config

Signatures

Files

b8498ddc0b9579769fd5041176772b820c60eed752a0f327cd4ba727c106fabe
.exe windows x86

5ffc70c5995f7a905e76c20c59eec171

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
OpenProcess
GetWindowsDirectoryA
SetFileAttributesA
GetDriveTypeA
FindClose
lstrcatA
lstrlenA
lstrcpyA
FindNextFileA
CloseHandle
GetFileSize
CreateFileA
GetLogicalDrives
FreeLibrary
LoadLibraryA
GetProcAddress
GetVersionExA
Process32Next
Sleep
CreateToolhelp32Snapshot
GetSystemDirectoryA
GetLastError
CreateMutexA
CreateThread
GetTickCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WinExec
CopyFileA
GetTempPathA
GetTempFileNameA
FindFirstFileA
GetModuleHandleA
Process32First
GetModuleFileNameA
FlushFileBuffers
SetEndOfFile
SetStdHandle
GetEnvironmentStringsW
HeapAlloc
RtlUnwind
CreateDirectoryA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
DeleteFileA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetFileAttributesA

user32

SendMessageA
MessageBoxA
FindWindowA
BlockInput
keybd_event
GetForegroundWindow
GetWindowThreadProcessId
GetWindowTextA
GetClassNameA
ShowWindow
SetWindowTextA

advapi32

RegQueryValueExA
GetUserNameA
RegCreateKeyA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyA

shell32

ShellExecuteA

winmm

mciSendStringA

Sections

.BJFnt
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BJFnt
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BJFnt
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BJFnt
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5ffc70c5995f7a905e76c20c59eec171

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

winmm

Sections

.BJFnt Size: 124KB - Virtual size: 124KB

.BJFnt Size: 8KB - Virtual size: 8KB

.BJFnt Size: 36KB - Virtual size: 36KB

.rsrc Size: 12KB - Virtual size: 12KB

.BJFnt Size: 20KB - Virtual size: 20KB

.BJFnt
Size: 124KB - Virtual size: 124KB

.BJFnt
Size: 8KB - Virtual size: 8KB

.BJFnt
Size: 36KB - Virtual size: 36KB

.rsrc
Size: 12KB - Virtual size: 12KB

.BJFnt
Size: 20KB - Virtual size: 20KB