b8c93446b98d359fc5667a59aec548400fff93e2b0f41e89247572626f4e61ab

Sharing

Copy URL Twitter E-mail

General

Target

b8c93446b98d359fc5667a59aec548400fff93e2b0f41e89247572626f4e61ab
Size

739KB
MD5

093b62f2e5869ccdb1a11b8259f3231d
SHA1

828a735ccd3c8e39718c905c7673812d4110e39c
SHA256

b8c93446b98d359fc5667a59aec548400fff93e2b0f41e89247572626f4e61ab
SHA512

af76f1f50d05d97d98eb46831fb3805662c49592b4fed2d719923525757ad15c19618114b841d8121220a17c10365462bfdbd445173e98601f56efc814824e21
SSDEEP

12288:1m5O1R82P6EflXVBv8V0sP8Tli2Tj+mdSkrIRFboOIJfDXKQSn6QMx:iOLd6mlXVBv8V0sP8Tli2Tj+m4Fbohpx

Score

N/A

Malware Config

Signatures

Files

b8c93446b98d359fc5667a59aec548400fff93e2b0f41e89247572626f4e61ab
.exe windows x86

e41d5cf2f08005cfa95e24fdb596e5d4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

kernel32

CloseHandle
GetLastError
CreateMutexW
OpenMutexW
SetLastError
SetThreadLocale
SetThreadUILanguage
GetProcAddress
GetModuleHandleW
GetUserDefaultUILanguage
OutputDebugStringW
WaitForMultipleObjects
CreateProcessW
GetModuleFileNameW
CreateEventW
GetTickCount
WaitForSingleObject
SetEvent
SetThreadPriority
CreateThread
GetModuleHandleExW
SizeofResource
LockResource
LoadResource
FindResourceW
VerSetConditionMask
VerifyVersionInfoW
GetVersionExW
SetErrorMode
LoadLibraryExW
LocalAlloc
GetSystemDefaultUILanguage
UnmapViewOfFile
CreateFileW
CreateFileMappingW
MapViewOfFile
FindResourceExW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetLocaleInfoW
HeapSize
MultiByteToWideChar
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
SetFilePointer
RtlUnwind
HeapReAlloc
VirtualAlloc
IsValidCodePage
GetOEMCP
GetACP
LocalFree
FreeLibrary
GetStartupInfoW
SetUnhandledExceptionFilter
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
HeapAlloc
RaiseException
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
SearchPathW

gdi32

CreateDIBSection
DeleteObject
DeleteDC
CreateCompatibleDC
SelectObject

user32

SetTimer
UnregisterClassW
LoadStringW
MessageBoxW
EnumWindows
GetWindowThreadProcessId
WaitForInputIdle
CharLowerBuffW
SystemParametersInfoW
SetWindowPos
ShowWindow
GetMessageW
TranslateMessage
DispatchMessageW
RegisterClassExW
CreateWindowExW
DefWindowProcW
UpdateLayeredWindow
PostMessageW
KillTimer
ReleaseDC
DestroyWindow

shlwapi

PathRemoveFileSpecW
StrStrW

shell32

ShellExecuteW

ole32

CoCreateInstance
CreateStreamOnHGlobal
CoInitializeEx
CoUninitialize

msimg32

AlphaBlend

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

gfwlupdate

CheckForUpdates

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 614KB - Virtual size: 614KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.dspack
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e41d5cf2f08005cfa95e24fdb596e5d4

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

shlwapi

shell32

ole32

msimg32

version

gfwlupdate

Sections

.text Size: 101KB - Virtual size: 100KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 614KB - Virtual size: 614KB

.reloc Size: 9KB - Virtual size: 9KB

.dspack Size: 8KB - Virtual size: 8KB

.text
Size: 101KB - Virtual size: 100KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 614KB - Virtual size: 614KB

.reloc
Size: 9KB - Virtual size: 9KB

.dspack
Size: 8KB - Virtual size: 8KB