b02bf3ba70b234d0185da72299dd56ef0dd091be15a4c7c76a4c8e09bee9b023

Sharing

Copy URL Twitter E-mail

General

Target

b02bf3ba70b234d0185da72299dd56ef0dd091be15a4c7c76a4c8e09bee9b023
Size

49KB
MD5

8b96af927bf26a67e6ca3241f2ffb99c
SHA1

53c4e4c38083bcfe2f820836bd3fb2bc2090d2aa
SHA256

b02bf3ba70b234d0185da72299dd56ef0dd091be15a4c7c76a4c8e09bee9b023
SHA512

be81b6e5942a11d4c2c0a5aa40a51ad569e142fc7784d559b284df168e3ef8db7a11e4b9730dda42d1fe0d2bb063d6cbc40805c5d6abcac72939a0efe79084b7
SSDEEP

768:P0w/VERLyXO/HBUDTtYOs/kte0GzHSdlmO5cleXaWq2RN:vdERgO/HBULejL+CleXi2R

Score

N/A

Malware Config

Signatures

Files

b02bf3ba70b234d0185da72299dd56ef0dd091be15a4c7c76a4c8e09bee9b023
.exe windows x86

c718fa18d6803a533421ff8ca55490ca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DefineDosDeviceW
LockResource
LoadResource
SizeofResource
FindResourceW
LocalFree
FormatMessageW
GetLastError
RaiseException
DeviceIoControl
QueryDosDeviceW
CloseHandle
FlushFileBuffers
CreateFileW
HeapFree
HeapAlloc
GetProcessHeap
SetLastError
CreateProcessW
ReleaseMutex
WaitForSingleObject
CreateMutexW
GetVersion
WaitNamedPipeW
Sleep
GlobalMemoryStatus
GetProcAddress
LoadLibraryA
GetModuleHandleW
ExitProcess
GetCommandLineW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter

msvcrt

memset
memcpy
fwprintf
_iob
exit
_wsetlocale
wcstok
swscanf
iswctype
wcstoul
_snwprintf
_putws
malloc
free
wprintf

user32

MessageBoxW
wsprintfW
SendMessageTimeoutW
LoadStringW

shell32

CommandLineToArgvW

ntdll

RtlInitUnicodeString
NtClose
RtlCreateUnicodeString
RtlDosPathNameToNtPathName_U
RtlFreeUnicodeString
RtlUnwind

imdisk.cpl

_ImDiskOpenDeviceByMountPoint@8
_ImDiskRemoveMountPoint@4
_ImDiskGetOffsetByFileExt@8
_ImDiskOpenDeviceByNumber@8
_ImDiskForceRemoveDevice@8
_ImDiskGetDeviceListEx@8
_ImDiskFindFreeDriveLetter@0
_ImDiskCreateMountPoint@8
_ImDiskGetPartitionInformation@16
_ImDiskOpenDeviceByName@8
_ImDiskStartService@4

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 769KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c718fa18d6803a533421ff8ca55490ca

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

shell32

ntdll

imdisk.cpl

Sections

.text Size: 25KB - Virtual size: 25KB

.data Size: 1024B - Virtual size: 769KB

.rsrc Size: 17KB - Virtual size: 17KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 25KB - Virtual size: 25KB

.data
Size: 1024B - Virtual size: 769KB

.rsrc
Size: 17KB - Virtual size: 17KB

.reloc
Size: 4KB - Virtual size: 4KB