b8eaed29a95db69f930217b4661e9a162e251daa1febacf8c28136357f557e96

Sharing

Copy URL Twitter E-mail

General

Target

b8eaed29a95db69f930217b4661e9a162e251daa1febacf8c28136357f557e96
Size

183KB
MD5

739296eed5dbb879cf0ac96ae0cf5513
SHA1

f6bb3bfcae73f0908a1b164661cb4f64771c9ab2
SHA256

b8eaed29a95db69f930217b4661e9a162e251daa1febacf8c28136357f557e96
SHA512

91cb34e473cb6d3f27efa48d68d981f675b403f85295d657c8dd38f58fd858e2a077b89ddb84d7acaba03b7f7dddf9bdcf00927cf813b2b7ff4ec6cb9f99e22d
SSDEEP

3072:x5cevICMdEf9rwgEe2Sihj8+t/iwZ/oos4xMpCs7sX8uA:0eQzcwglGjtt/3wosDpDoXTA

Score

N/A

Malware Config

Signatures

Files

b8eaed29a95db69f930217b4661e9a162e251daa1febacf8c28136357f557e96
.exe windows x86

1d3be6e9060c650769c71d0173f93e02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
lstrcpynW
CreateEventW
FileTimeToLocalFileTime
GetCurrentThreadId
ReplaceFileW
GetThreadLocale
GetACP
CloseHandle
FindCloseChangeNotification
InterlockedDecrement
GetProcessId
WaitForSingleObject
FindClose
GetLocaleInfoA
ResetEvent
FreeLibrary
GetDriveTypeW
GetCurrentProcessId
GetModuleFileNameA
WideCharToMultiByte
FindFirstFileW
MulDiv
GlobalLock
GetFullPathNameW
DisableThreadLibraryCalls
GlobalAlloc
GlobalUnlock
EnumResourceTypesA
FileTimeToSystemTime
EnterCriticalSection
lstrlenW
InitializeCriticalSection
SetEvent
InterlockedExchange
GetTickCount
CreateThread
GetProcAddress
FindFirstChangeNotificationW
GlobalReAlloc
ExitProcess
GetLastError
LeaveCriticalSection
FindNextChangeNotification
GetSystemTimeAsFileTime
MultiByteToWideChar
GetVersionExW
InterlockedIncrement
QueryPerformanceCounter
lstrlenA
GetModuleHandleW
Sleep
GetVersionExA

user32

BringWindowToTop
LoadCursorW
IsRectEmpty
GetSysColorBrush
SetCursor
ClientToScreen
SetTimer
UnionRect
SetRect
CopyRect
GetParent
ShowScrollBar
FrameRect
IsWindow
ReleaseDC
FindWindowExW
CreatePopupMenu
LoadImageW
DestroyMenu
GetSysColor
TrackPopupMenuEx
OffsetRect
GetDesktopWindow
KillTimer
FillRect
GetActiveWindow
GetDC
EqualRect
InflateRect
EnableWindow
PtInRect
GetCursorPos
DrawTextW
SetForegroundWindow
DefWindowProcW
SetFocus
ReleaseCapture
ScreenToClient
SetRectEmpty
IntersectRect
GetClientRect
GetSystemMetrics
UpdateWindow
IsWindowVisible
PostMessageW
SetWindowLongW
SendMessageW
GetWindowRect
SetCapture
wsprintfW
GetWindowLongW
DrawFocusRect
InvalidateRect

avifil32

AVISaveOptions
AVIMakeCompressedStream

ole32

CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance
OleUninitialize
StringFromGUID2
OleInitialize
CoInitialize

shell32

SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation
DragQueryFileW
SHGetDesktopFolder
SHGetFileInfoW

advapi32

RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegSetValueW
RegCreateKeyW
RegEnumKeyExW
RegDeleteKeyW

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d3be6e9060c650769c71d0173f93e02

Headers

File Characteristics

Imports

kernel32

user32

avifil32

ole32

shell32

advapi32

Sections

.text Size: 108KB - Virtual size: 107KB

.rdata Size: 3KB - Virtual size: 3KB

.bss Size: 69KB - Virtual size: 69KB

.tls Size: 1024B - Virtual size: 124KB

.text
Size: 108KB - Virtual size: 107KB

.rdata
Size: 3KB - Virtual size: 3KB

.bss
Size: 69KB - Virtual size: 69KB

.tls
Size: 1024B - Virtual size: 124KB