b9cecb65efeffdfccf703304f6993ee6168196ccccb69d018e5ae8f12e173219

Sharing

Copy URL Twitter E-mail

General

Target

b9cecb65efeffdfccf703304f6993ee6168196ccccb69d018e5ae8f12e173219
Size

512KB
MD5

95a1ce336ef0674346257095932d30bd
SHA1

42795ea6e3e7a47e80c0eca4f9ce5db744a48848
SHA256

b9cecb65efeffdfccf703304f6993ee6168196ccccb69d018e5ae8f12e173219
SHA512

c298e85a9a17f2b175e22060d0bb3f44257b790bf1bc008adfe46c5006070c848d6ffcebacbe53fd094a90650f75646d227f1f1cf1a2bfe37c5babe0f87e7e3c
SSDEEP

6144:yUqi8LGHnmQbIDWNqDei8mwV2u3rtd1d7s6YamIetV46PXV+OFqLnQHuC:HqKHLm0TiahdITVV46fkO11

Score

N/A

Malware Config

Signatures

Files

b9cecb65efeffdfccf703304f6993ee6168196ccccb69d018e5ae8f12e173219
.exe windows x86

20fe87e7fdf33a81d5b57cee970cfcc1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
SetStdHandle
GetNumberFormatW
FindFirstFileExW
GetPrivateProfileStringA
SetConsoleOutputCP
GetCurrentProcessId
LoadLibraryExW
InitializeCriticalSection
LocalAlloc
FlushConsoleInputBuffer
SetProcessWorkingSetSize
GetCommConfig
ExitProcess
GetVersion
EnumCalendarInfoA
SetVolumeLabelA
lstrcatW
RemoveDirectoryW
Beep
GetDiskFreeSpaceW
ConnectNamedPipe
GetProfileStringA
LoadLibraryExA
FlushFileBuffers
FreeLibrary
ReadFile
DeleteCriticalSection
DosDateTimeToFileTime
GlobalFindAtomA
IsProcessorFeaturePresent
LCMapStringA
FreeEnvironmentStringsA
GetOEMCP
CreateMutexA
GetWindowsDirectoryA
GetDateFormatA
VirtualQueryEx
SetEndOfFile
GlobalFree
GetModuleFileNameW
GetBinaryTypeA
SetConsoleWindowInfo
WriteConsoleOutputCharacterA
GetConsoleMode
SetEnvironmentVariableW
TryEnterCriticalSection
GetSystemTime
GetModuleHandleA
SetEvent
GlobalAddAtomW
MoveFileExA
SetConsoleTitleA
GetCurrentDirectoryW
GetEnvironmentVariableW
RemoveDirectoryA
_lclose
VirtualFree
AreFileApisANSI
GetStartupInfoA
EnumDateFormatsW
GlobalFlags
WritePrivateProfileStructA
VirtualProtect
ReadConsoleA
GetShortPathNameA
LoadResource
GetCurrentProcess
VirtualUnlock
SetCurrentDirectoryA
ReleaseSemaphore
SizeofResource
WritePrivateProfileSectionW
SetConsoleMode
EnumResourceNamesW
GetFileInformationByHandle
GetEnvironmentStringsW
LocalSize
ReadDirectoryChangesW
PeekNamedPipe
IsBadReadPtr
CreateEventA
SetThreadAffinityMask
GetLocaleInfoW
MultiByteToWideChar
CloseHandle
MoveFileW
GetCommandLineA
GetVersionExA
lstrlenA
CreateMutexW
VirtualAlloc

user32

FlashWindow
SetClassLongA
SetKeyboardState
SetParent
MessageBoxIndirectW
GetMenuItemCount
DrawStateA
CountClipboardFormats
CheckDlgButton
SetMenuItemInfoW
GetMessagePos
MapWindowPoints
GetClientRect
EnableWindow
OemKeyScan
DrawIconEx
ReleaseDC
GetKeyboardType
ClientToScreen
DefWindowProcA
InSendMessage
GetDlgItemTextW
ValidateRgn
GetClassInfoExW
GetWindowRgn
SetClipboardData
MsgWaitForMultipleObjectsEx
SetRect
GetClassLongA
WaitForInputIdle
GetDC
RegisterClipboardFormatA
TranslateMDISysAccel
DialogBoxIndirectParamA
IsDlgButtonChecked
ExcludeUpdateRgn
SendNotifyMessageA
SetCursorPos
GetDCEx
SetRectEmpty
RegisterClassW
LoadAcceleratorsA
CreateWindowStationW
OpenWindowStationA
ReleaseCapture
SetProcessDefaultLayout
GetAncestor
GetFocus
MessageBoxA
NotifyWinEvent
SetPropA
GetMenuStringA
GetWindowThreadProcessId
CreateWindowExA
EnumDisplayDevicesW
EndDialog
OffsetRect

gdi32

SetGraphicsMode
CopyMetaFileA
GetWindowOrgEx
GetObjectA
CreateRectRgnIndirect

advapi32

SetNamedSecurityInfoA
RegOpenKeyExA
RegSetValueExA
GetSecurityDescriptorOwner
InitiateSystemShutdownA
CryptGetUserKey
CryptReleaseContext
RegNotifyChangeKeyValue
GetFileSecurityW
CloseServiceHandle
CryptAcquireContextW
OpenServiceW
CryptExportKey
GetPrivateObjectSecurity
GetSecurityDescriptorDacl
RegEnumKeyExA
RegRestoreKeyW
PrivilegeCheck

shell32

SHAddToRecentDocs
ShellExecuteA
SHBrowseForFolderA

ole32

CoReleaseMarshalData
OleCreateFromData
CLSIDFromString

oleaut32

SafeArrayGetLBound

comctl32

ImageList_SetImageCount
ImageList_DrawIndirect

shlwapi

PathRemoveExtensionW
PathParseIconLocationW
StrCmpNIW
PathGetCharTypeA
PathFileExistsW
PathGetDriveNumberA
PathFindExtensionA
PathStripPathA
PathRelativePathToW
StrStrW
StrRStrIW
SHAutoComplete
HashData
PathIsUNCServerW
PathUndecorateW

Sections

ymwcgky
Size: 336KB - Virtual size: 333KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

iyauwuk
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

umikk
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

misiwe
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

20fe87e7fdf33a81d5b57cee970cfcc1

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

Sections

ymwcgky Size: 336KB - Virtual size: 333KB

iyauwuk Size: 8KB - Virtual size: 5KB

umikk Size: 36KB - Virtual size: 32KB

misiwe Size: 40KB - Virtual size: 38KB

ymwcgky
Size: 336KB - Virtual size: 333KB

iyauwuk
Size: 8KB - Virtual size: 5KB

umikk
Size: 36KB - Virtual size: 32KB

misiwe
Size: 40KB - Virtual size: 38KB