b0695ed76e9e1efb5b81f3171d9bca71ac10f57df7969417cc10e417afc48c05

Sharing

Copy URL

Twitter E-mail

General

Target

b0695ed76e9e1efb5b81f3171d9bca71ac10f57df7969417cc10e417afc48c05
Size

1.1MB
MD5

10e4d412af36b28b41659ed90597894f
SHA1

0c99a44733ef71e34a4de3a0b38354ec804d0183
SHA256

b0695ed76e9e1efb5b81f3171d9bca71ac10f57df7969417cc10e417afc48c05
SHA512

bd2872d1d598c4ae2bf7e7f5a5469d2e95fa17c83df6d89836a274025239dcdaedc7da3884f6a90827f5ff5d810b130c3f94dbee746e3d5e4d86e29d5e6cd2d1
SSDEEP

6144:21noKyDMK2bzizbSIposSMDuH2aCGw1ST1wQLdqv7tTBqTe1:m+XqzKbSIposruH2anwohwQUv7tVqTe1

Score

N/A

Malware Config

Signatures

Files

b0695ed76e9e1efb5b81f3171d9bca71ac10f57df7969417cc10e417afc48c05
.exe windows x86

b8368ebab963b2fb8fa7d0150fdd8849

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msi

ord169
ord70
ord141
ord88
ord190
ord175

comctl32

ord17

kernel32

WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
DecodePointer
RaiseException
CompareStringW
GetCommandLineW
GetUserDefaultUILanguage
GetTempPathW
FormatMessageW
GetLastError
DeleteFileW
LoadLibraryW
LocalFree
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
SizeofResource
WriteFile
CreateFileW
FindResourceExA
LockResource
CloseHandle
LoadResource
FreeLibrary
LoadLibraryExW
FindClose
MoveFileExW
HeapFree
HeapSize
HeapReAlloc
HeapAlloc
GetProcessHeap
CreateDirectoryW
GetTempFileNameW
FreeEnvironmentStringsW
LCMapStringW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
SetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetProcAddress
GetStdHandle
GetModuleFileNameA
ExitProcess
GetModuleHandleExW
GetACP
GetStringTypeW
GetFileType

user32

LoadStringW
MessageBoxW
MessageBoxExW
EndDialog
SetWindowTextW
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItem
DialogBoxParamW
EnableWindow
SetDlgItemTextW

shell32

SHGetFolderPathW
CommandLineToArgvW

ole32

StringFromGUID2

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b8368ebab963b2fb8fa7d0150fdd8849

Headers

DLL Characteristics

File Characteristics

Imports

msi

comctl32

kernel32

user32

shell32

ole32

Sections

.text Size: 70KB - Virtual size: 69KB

.rdata Size: 27KB - Virtual size: 26KB

.data Size: 2KB - Virtual size: 4KB

.gfids Size: 512B - Virtual size: 172B

.rsrc Size: 5.5MB - Virtual size: 5.5MB

.text
Size: 70KB - Virtual size: 69KB

.rdata
Size: 27KB - Virtual size: 26KB

.data
Size: 2KB - Virtual size: 4KB

.gfids
Size: 512B - Virtual size: 172B

.rsrc
Size: 5.5MB - Virtual size: 5.5MB