b025b7a2e55c553bf3acfe0cb8699f55221e8087866e27564354e2e7b6398f8d

Sharing

Copy URL Twitter E-mail

General

Target

b025b7a2e55c553bf3acfe0cb8699f55221e8087866e27564354e2e7b6398f8d
Size

150KB
MD5

fd12849af0195f1912ed6d5afad40479
SHA1

92bfccd70b7dd8409ef4924fb897aafa4895ef34
SHA256

b025b7a2e55c553bf3acfe0cb8699f55221e8087866e27564354e2e7b6398f8d
SHA512

b425bc5210b432adb8b7c9f6dfa5175f12ae9cd93a7f0bcbf44b8b23f8516765585426cbbbd44e902e6960d7f7cabacde43401dd8c52ae4efb239412104cb048
SSDEEP

3072:aq9+o0nXtDdcf1hdqrKfK84hRb7sJk7gAXzf1+7ULt0h:B9+o0nXtDdo1hd4KR4vbwJCfUh

Score

N/A

Malware Config

Signatures

Files

b025b7a2e55c553bf3acfe0cb8699f55221e8087866e27564354e2e7b6398f8d
.exe windows x86

b28f1e37db3adc1995bf401ca65650b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
ExitWindowsEx
CharPrevA
GetDlgItemTextA
GetWindowLongA
GetDesktopWindow
DispatchMessageA
SendMessageA
PeekMessageA
GetDlgItem
SetWindowLongA
GetWindowRect
LoadStringA
EnableWindow
EndDialog
SetDlgItemTextA
CallWindowProcA
MsgWaitForMultipleObjects
ShowWindow
MessageBoxA
GetDC
CharNextA
ReleaseDC
SendDlgItemMessageA
MessageBeep
CharUpperA
SetWindowPos
SetWindowTextA
DialogBoxIndirectParamA
SetForegroundWindow

advapi32

RegCloseKey
CryptGetHashParam
RegQueryValueExA
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
RegOpenKeyExA

ole32

OleInitialize
CLSIDFromProgID
CoCreateInstance

gdi32

GetStockObject
DeleteObject
CreateFontIndirectA
GetObjectA

kernel32

ReleaseSemaphore
FindNextFileW
GetSystemDefaultLangID
GetFileSize
CreateDirectoryW
SetUnhandledExceptionFilter
DeviceIoControl
CloseHandle
RemoveDirectoryW
GetFileAttributesW
GetTempPathW
GetCurrentThreadId
GetWindowsDirectoryA
CreateSemaphoreA
FindResourceW
IsBadReadPtr
DeleteFileW
GetSystemDirectoryW
FindFirstFileW
GetPrivateProfileIntW
GetVersionExA
GetUserDefaultLangID
ReleaseMutex
CreateFileW
HeapFree
GetTickCount
GetProcessHeap
VirtualUnlock
lstrlenA
LocalFree
GetPrivateProfileStringW
SetFilePointer
QueryPerformanceCounter
OpenFileMappingW
GetSystemTime
SetFileAttributesA
VirtualAlloc
GetTempFileNameW
CreateFileA
SetEndOfFile
GetStartupInfoA
CreateMutexA
UnhandledExceptionFilter
VirtualFree
VirtualLock
LockResource
GetCurrentProcessId
WriteFile
SetLastError
HeapAlloc
InterlockedDecrement
GetSystemTimeAsFileTime
InterlockedIncrement
FindClose
lstrcmpiA
OpenSemaphoreA
GlobalWire
SizeofResource
GetCurrentProcess
ReadFile
GetLastError
MultiByteToWideChar
LoadResource

ntdll

RtlCreateSecurityDescriptor
NtQueryObject
RtlEqualUnicodeString
NtSetSecurityObject
NtQuerySecurityObject
RtlInitUnicodeString
RtlInitAnsiString

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 130KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b28f1e37db3adc1995bf401ca65650b6

Headers

File Characteristics

Imports

user32

advapi32

ole32

gdi32

kernel32

ntdll

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 6KB - Virtual size: 122KB

.rsrc Size: 3KB - Virtual size: 3KB

.edata Size: 130KB - Virtual size: 191KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 6KB - Virtual size: 122KB

.rsrc
Size: 3KB - Virtual size: 3KB

.edata
Size: 130KB - Virtual size: 191KB