b8b68f34352722cfb53c5aa984cfd8b8160248fa995d68b81ba4ad5ec097e8a6

Sharing

Copy URL Twitter E-mail

General

Target

b8b68f34352722cfb53c5aa984cfd8b8160248fa995d68b81ba4ad5ec097e8a6
Size

252KB
MD5

8db21ada5c091a9514aa77b40cb48471
SHA1

bb2bf7f40b3a294f115d9e4269853f16720dc563
SHA256

b8b68f34352722cfb53c5aa984cfd8b8160248fa995d68b81ba4ad5ec097e8a6
SHA512

31e65b363f033c4a738fde2d987b13876261854df79168b3de5a696281d74cb91f318ff65a3e3d83d085ec2786510452b93d38e00ec605e36bec1bd509ddb6ba
SSDEEP

6144:KfvmG3jNEiy+kkF9aFQ3Vpuu8Vj1sCqzHUM:KHmKjNfsK67Vj15ql

Score

N/A

Malware Config

Signatures

Files

b8b68f34352722cfb53c5aa984cfd8b8160248fa995d68b81ba4ad5ec097e8a6
.exe windows x86

4f92b8ea1707235a4fba3899facc893d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AccessCheck
CryptVerifySignatureW
OpenProcessToken
RegEnumKeyExW
RegSetKeySecurity
CryptAcquireContextW
GetSecurityDescriptorGroup
DeleteService
GetSecurityDescriptorLength

user32

GetKeyboardLayout
GetWindowLongW
SetMenuItemInfoW
GetNextDlgTabItem
DestroyCursor
LoadIconW
IsWindowEnabled
RedrawWindow
SetWindowLongW
WaitMessage
RegisterClassExA
GetForegroundWindow
DdeAccessData
DdeFreeStringHandle
GetWindowModuleFileNameA
InvalidateRect
GetWindowTextW
DialogBoxParamW
CallNextHookEx

kernel32

GetStringTypeW
GetStringTypeA
LCMapStringA
MultiByteToWideChar
HeapReAlloc
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetCommandLineA
CreateDirectoryA
GetDateFormatA
GetExitCodeThread
CreateThread
lstrlenW
FindClose
TerminateProcess
QueryDosDeviceA
SetFilePointerEx
GetDiskFreeSpaceExW
FindResourceW
SetCurrentDirectoryA
GetFileType
LoadLibraryA
SetThreadExecutionState
SwitchToThread
GetStdHandle
GetFileInformationByHandle
GlobalAlloc
lstrlenA
IsBadWritePtr
GetDiskFreeSpaceW
OpenFileMappingW
GetExitCodeProcess
LocalReAlloc
TlsFree
LCMapStringW
GlobalFree
Process32NextW
UnmapViewOfFile
GlobalReAlloc
GetComputerNameA
GetLocalTime
GetFileAttributesA
LocalFree
GetProcAddress
MoveFileExW
GetThreadLocale
GetLongPathNameW
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
GetCurrentProcess
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f92b8ea1707235a4fba3899facc893d

Headers

File Characteristics

Imports

advapi32

user32

kernel32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 200KB - Virtual size: 199KB

.data Size: 16KB - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 656B

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 200KB - Virtual size: 199KB

.data
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 656B