b846dacbb69fbd09ad607f3ff2ff6b2bcf36c02aab49979253a9dfbc9210667b

Sharing

Copy URL Twitter E-mail

General

Target

b846dacbb69fbd09ad607f3ff2ff6b2bcf36c02aab49979253a9dfbc9210667b
Size

637KB
MD5

88898fed0b746770cf849de348dcf542
SHA1

4b85f713d02b116d80e1c14f47cc55c082f1f375
SHA256

b846dacbb69fbd09ad607f3ff2ff6b2bcf36c02aab49979253a9dfbc9210667b
SHA512

78fac9d980ab84478e87e895795dc1a98e9bc8d57c878eb827f00780e5092ad7646f1ca5334dd2353f2a9bd71823cefb6f3864d8b14d6db17720ca53bfa866d3
SSDEEP

12288:FQAaAajMSFORKX4/X61y45TPc2olKwJxsWCcNhHGSFt+iCH2VJ4kC:FplajMqORKUq142oUw/NhHGSF05kC

Score

N/A

Malware Config

Signatures

Files

b846dacbb69fbd09ad607f3ff2ff6b2bcf36c02aab49979253a9dfbc9210667b
.exe windows x86

ec8aaa0e7db1bae8c585a46710a09e54

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_get_osfhandle
iswdigit
_wcsrev
tolower
_beginthread
_Getdays
islower
fseek
_mbsupr

kernel32

CreateProcessW
CreateTimerQueueTimer
SetVolumeLabelW
GetLocaleInfoW
OpenFile
VirtualAlloc
SetConsoleOutputCP
RegisterWaitForSingleObject
CancelWaitableTimer
GetFileAttributesA
ExpandEnvironmentStringsA
AreFileApisANSI

advapi32

GetSecurityDescriptorDacl
RegSetValueExA
LsaQueryInformationPolicy
InitializeSecurityDescriptor
LookupAccountNameA
ConvertSidToStringSidA
ClearEventLogW
RegSetValueA
LsaSetInformationPolicy

uxtheme

GetWindowTheme
DrawThemeText
GetThemeMetric
GetThemeSysColor
GetCurrentThemeName
IsAppThemed
GetThemePartSize
GetThemeFont
GetThemeMargins
GetThemeBackgroundRegion
IsThemePartDefined
IsThemeBackgroundPartiallyTransparent
DrawThemeBackground

netapi32

NetUserGetLocalGroups
NetGetJoinInformation
NetShareEnum
NetUserGetInfo
NetUnjoinDomain
I_NetServerSetServiceBitsEx
NetQueryDisplayInformation
NetServerTransportEnum

user32

UnregisterClassW
EnumPropsW
wsprintfA
MonitorFromRect
GetCapture
PeekMessageW
DeregisterShellHookWindow

imm32

ImmUnlockIMC
ImmReleaseContext
ImmSetCandidateWindow
ImmLockIMCC
ImmConfigureIMEW
ImmUnlockIMCC
ImmSetCompositionStringW
ImmDisableIME
ImmIsIME
ImmGetGuideLineW
ImmCreateContext
ImmGetImeMenuItemsW
ImmGetCompositionFontW
ImmGetIMEFileNameA

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 226KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 167KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 190KB - Virtual size: 357KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec8aaa0e7db1bae8c585a46710a09e54

Headers

File Characteristics

Imports

msvcrt

kernel32

advapi32

uxtheme

netapi32

user32

imm32

Sections

.text Size: 50KB - Virtual size: 49KB

.bss Size: 226KB - Virtual size: 268KB

DATA Size: 167KB - Virtual size: 265KB

DATA Size: 190KB - Virtual size: 357KB

.rsrc Size: 512B - Virtual size: 472B

.reloc Size: 1024B - Virtual size: 556B

.text
Size: 50KB - Virtual size: 49KB

.bss
Size: 226KB - Virtual size: 268KB

DATA
Size: 167KB - Virtual size: 265KB

DATA
Size: 190KB - Virtual size: 357KB

.rsrc
Size: 512B - Virtual size: 472B

.reloc
Size: 1024B - Virtual size: 556B