b8f48c7fce97d4f3016d25bda845147735e3f2abead52865ea26ba44064984d7

Sharing

Copy URL Twitter E-mail

General

Target

b8f48c7fce97d4f3016d25bda845147735e3f2abead52865ea26ba44064984d7
Size

368KB
MD5

a3ef8c90702a8134ce63dca622a7ef88
SHA1

db88391c870979d882e70b6a36d05d0ec09dbb64
SHA256

b8f48c7fce97d4f3016d25bda845147735e3f2abead52865ea26ba44064984d7
SHA512

a68bbf848b7c2bcd9da7e0bca4f8cfd4d0753f1acac8e90abf499d76a6bf40b7131c5475cd6c2c253a6443767fa8f6f6c589c8074b0d9bc8c1e808ba211b2dfb
SSDEEP

6144:dUESQdOE2Ubq6UBnWitfF5cky3c/MHmvvD1Ve9bFO5+YigUzsNI:dUESs2Ubq6UQiv5SuMGXDvuw5+1sNI

Score

N/A

Malware Config

Signatures

Files

b8f48c7fce97d4f3016d25bda845147735e3f2abead52865ea26ba44064984d7
.exe windows x86

ccaa6a3739ba07714b9cc6f162d9f575

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_purecall
free
malloc
_adjust_fdiv
mbstowcs
_ftol
??3@YAXPAX@Z
??2@YAPAXI@Z
atoi
_vsnwprintf
_initterm
memmove

user32

SetRect
SetRectEmpty
IsRectEmpty
CharPrevW
DestroyWindow
GetDC
ReleaseDC
PeekMessageW
TranslateMessage
MessageBoxW
LoadStringW
EnableWindow
GetDlgItem
SetDlgItemTextW
wsprintfW
DispatchMessageW
DialogBoxParamW
IsDlgButtonChecked
GetDlgItemInt
EndDialog
SendMessageW
CheckDlgButton
SetDlgItemInt
SendDlgItemMessageW
MessageBeep

kernel32

GetLastError
GlobalSize
GetCurrentThreadId
DeleteCriticalSection
IsBadReadPtr
ResetEvent
EnterCriticalSection
InitializeCriticalSection
lstrcpyW
lstrcmpW
WideCharToMultiByte
MultiByteToWideChar
GetOverlappedResult
ReadFile
CloseHandle
CreateEventW
GetFileSize
GetDiskFreeSpaceW
GetFullPathNameW
CreateFileW
QueryPerformanceCounter
LeaveCriticalSection
WriteFile
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalHandle
MulDiv
GlobalLock
GlobalAlloc
LocalFree
LocalAlloc
lstrlenA
lstrcpynW
lstrlenW
lstrcatW
SetErrorMode
lstrcatA
lstrcpyA
DisableThreadLibraryCalls
GetTickCount

gdi32

CreateHalftonePalette
CreatePalette

winmm

mmioRead
mmioOpenW
mmioWrite
mmioSeek
mmioClose

advapi32

RegQueryValueExA
RegOpenKeyW
RegOpenKeyA
RegCloseKey
RegQueryValueW
RegEnumKeyW

ole32

CoGetMarshalSizeMax
CoMarshalInterface
CreateStreamOnHGlobal
CoUnmarshalInterface
CoCreateInstance
OleGetClipboard
ReleaseStgMedium
OleSetClipboard
OleUninitialize
OleInitialize
CoGetMalloc
OleFlushClipboard

msacm32

acmMetrics
acmGetVersion
acmFormatDetailsW
acmFormatTagDetailsW
acmStreamPrepareHeader
acmStreamSize
acmStreamOpen
acmFormatSuggest
acmStreamClose
acmStreamUnprepareHeader
acmStreamConvert
acmFormatChooseW

msvfw32

ICCompressorFree
ICCompressorChoose
ICClose
ICGetInfo
ICLocate
ICSendMessage
ICOpen
ICDecompress
ICCompress
ICGetDisplayFormat

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.upx
Size: 1024B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hyas
Size: 1024B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qdata
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 1024B - Virtual size: 122B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ldata
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ccaa6a3739ba07714b9cc6f162d9f575

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

user32

kernel32

gdi32

winmm

advapi32

ole32

msacm32

msvfw32

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 1KB

.idata Size: 1024B - Virtual size: 112B

.upx Size: 1024B - Virtual size: 54B

.hyas Size: 1024B - Virtual size: 74B

.pdata Size: 1024B - Virtual size: 108B

.qdata Size: 168KB - Virtual size: 167KB

.adata Size: 1024B - Virtual size: 122B

.ldata Size: 168KB - Virtual size: 167KB

.rsrc Size: 11KB - Virtual size: 10KB

.reloc Size: 1024B - Virtual size: 408KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 1KB

.idata
Size: 1024B - Virtual size: 112B

.upx
Size: 1024B - Virtual size: 54B

.hyas
Size: 1024B - Virtual size: 74B

.pdata
Size: 1024B - Virtual size: 108B

.qdata
Size: 168KB - Virtual size: 167KB

.adata
Size: 1024B - Virtual size: 122B

.ldata
Size: 168KB - Virtual size: 167KB

.rsrc
Size: 11KB - Virtual size: 10KB

.reloc
Size: 1024B - Virtual size: 408KB