b50511a86bb0c26f9a573b0284abaa83dcef60ef6924f89c350c59439028eefc

Sharing

Copy URL Twitter E-mail

General

Target

b50511a86bb0c26f9a573b0284abaa83dcef60ef6924f89c350c59439028eefc
Size

244KB
MD5

167ad280748236a732989c74394e2f39
SHA1

0c1280f04b3674430e7c842b151337defc5b03b7
SHA256

b50511a86bb0c26f9a573b0284abaa83dcef60ef6924f89c350c59439028eefc
SHA512

247b1d1a6b3e7268b797dd6945133cfaf2b41d9c7d168539a49914ad67de721fa85b977aa8b487710e7eeb645b151751240df421298aa01fd9fb8edfef5373e0
SSDEEP

3072:W6pvzX9Cy6Z/nC1vffZE12OGi45SadTqusrcRkxcOxNCf9ip2ZoLHvf/YQpXISNd:WeztOZ/ivfNi45LBsr5VNwrZotFN6Y

Score

N/A

Malware Config

Signatures

Files

b50511a86bb0c26f9a573b0284abaa83dcef60ef6924f89c350c59439028eefc
.exe windows x86

b7b7a172068c89f347bf44ddbbcd29e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
HeapDestroy
TlsSetValue
GetVersionExA
RaiseException
GetCurrentProcess
GetCommandLineW
GetFileSize
InitializeCriticalSectionAndSpinCount
GetLastError
LoadLibraryW
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetStringTypeW
GetStringTypeA
LCMapStringW
GetStdHandle
LoadLibraryA
GetProcAddress
IsBadWritePtr
VirtualAlloc
HeapAlloc
GetOEMCP
FatalAppExitA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
RtlUnwind
HeapFree
VirtualFree
GetEnvironmentVariableA
GetCurrentThread
SetLastError
DeleteCriticalSection
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
ExitProcess
GetVersion
RegisterWaitForSingleObject
GetModuleHandleA
QueryPerformanceCounter
GetProcessHeap
MultiByteToWideChar
SetErrorMode
SetEvent
TerminateProcess
LoadResource
FreeEnvironmentStringsW
GetCurrentProcessId
FlushFileBuffers
GetStartupInfoA
TlsFree
GetFileAttributesW
VirtualAllocEx
GetSystemTimeAsFileTime
UnhandledExceptionFilter
WideCharToMultiByte
GetModuleFileNameW
HeapReAlloc
InterlockedDecrement
WriteFile
TlsAlloc
SetUnhandledExceptionFilter
InterlockedIncrement
FindFirstFileW
HeapCreate
GetACP
CreateThread
GetTickCount
GetCommandLineA
CreateFileW
HeapSize
GetFileType
Sleep
SetEndOfFile
GetCurrentThreadId
GetCPInfo
FreeLibrary
GetFileSizeEx
TlsGetValue
GetModuleHandleW
lstrlenW
LCMapStringA
SetEnvironmentVariableA

user32

GetWindowTextLengthW
MessageBoxW
BeginPaint
EndPaint
SetTimer
GetCursorPos
GetWindowTextLengthA
LoadStringA
GetParent
ReleaseDC
GetDlgItemInt
SetWindowPos
SetForegroundWindow
LoadStringW
MessageBoxA
GetDlgItem
GetWindowTextA
EnableWindow
TranslateMessage
GetDlgItemTextA
EndDialog
GetDlgItemTextW
IsWindowUnicode
SendMessageA
GetWindowTextW
GetWindowDC
PostQuitMessage
GetWindowPlacement
GetClientRect
GetSystemMetrics
DestroyWindow
GetWindowLongA
GetWindowThreadProcessId
ShowWindowAsync
GetDCEx
GetWindowLongW
GetSysColorBrush
ShowWindow
IsWindowEnabled
IsWindowVisible
InvalidateRect
GetMenuItemCount
SetCursor
SetRectEmpty
GetDesktopWindow
GetWindowRect

gdi32

GetObjectW
CreateRectRgnIndirect
BitBlt
CreateSolidBrush
ExtTextOutW
CreateCompatibleBitmap
CreateBitmap
PatBlt
SaveDC
GetClipBox
RestoreDC
StretchBlt
CreateFontIndirectA
SetViewportOrgEx
SelectPalette
CreatePenIndirect
CreateFontIndirectW
ExtSelectClipRgn
GetStretchBltMode
RealizePalette
CreatePalette
ExtCreatePen
SetWindowOrgEx
GetObjectA
ExtTextOutA
CreateDIBSection
CreateDIBitmap
MoveToEx
LineTo
RectVisible
Rectangle
SetMapMode
GetTextExtentPoint32W
SelectClipRgn
SetBkColor
CreateCompatibleDC
GetStockObject
DeleteDC
SetTextColor
SetStretchBltMode
GetDeviceCaps
SelectObject
DeleteObject
SetBkMode

ole32

CoInitializeSecurity
RegisterDragDrop
CoQueryProxyBlanket
StringFromCLSID
CoDisconnectObject
OleRun
CoInitialize
ReleaseStgMedium
OleFlushClipboard
CoCreateGuid
CreateStreamOnHGlobal
CoRegisterMessageFilter
CoGetClassObject
CoUninitialize
CoLockObjectExternal
CLSIDFromProgID
CreateBindCtx
CoSetProxyBlanket
CoCreateInstance
CoTaskMemAlloc
StgCreateDocfileOnILockBytes
CLSIDFromString
CoRevokeClassObject
CoTaskMemFree
GetRunningObjectTable
CoFreeUnusedLibraries
RevokeDragDrop
OleInitialize
OleRegGetUserType
OleUninitialize
CreateILockBytesOnHGlobal

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7b7a172068c89f347bf44ddbbcd29e7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

Sections

.text Size: 52KB - Virtual size: 48KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 160KB - Virtual size: 273KB

.rsrc Size: 16KB - Virtual size: 12KB

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 160KB - Virtual size: 273KB

.rsrc
Size: 16KB - Virtual size: 12KB