b5653bd914bdf0f821a7485d2e7a844d745fa5becaed69def4db5112ec8ce2d2

Sharing

Copy URL

Twitter E-mail

General

Target

b5653bd914bdf0f821a7485d2e7a844d745fa5becaed69def4db5112ec8ce2d2
Size

832KB
MD5

b03f93f50a392cb5ac50bd33851835bd
SHA1

86daccc92a1d985576ea6c08247f08e2f9dd1aff
SHA256

b5653bd914bdf0f821a7485d2e7a844d745fa5becaed69def4db5112ec8ce2d2
SHA512

6e4723418af16fefcc8a21d1a543ac9fbcfadab0ffd52b0579f52e7a7333ea0164a0948682852676e33daa21b70ec6f6a31e02f465e6337f078b420715eb8941
SSDEEP

24576:6it9X1DbOkaKCiEJ9N3QppbcZnpNc27d4j0p2EuAOssB:D1DfaKtEn3Q7bwc27d4j0kd

Score

N/A

Malware Config

Signatures

Files

b5653bd914bdf0f821a7485d2e7a844d745fa5becaed69def4db5112ec8ce2d2
.exe windows x86

0c2bc275a694bc27ccbd6faa6993a528

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
FreeEnvironmentStringsW
FlushFileBuffers
CreateDirectoryA
GetEnvironmentStrings
DebugBreak
EnumResourceLanguagesW
OpenEventW
CreateThread
UnhandledExceptionFilter
GetStartupInfoA
lstrcmpiW
GetModuleFileNameA
TlsSetValue
GetOEMCP
IsBadWritePtr
GetCurrentThreadId
FreeEnvironmentStringsA
GetStringTypeW
GetProcAddress
GetSystemTimeAsFileTime
ReadFile
LockResource
CloseHandle
HeapValidate
CreateMutexA
LeaveCriticalSection
GetDriveTypeW
SetFilePointer
OutputDebugStringA
VirtualProtectEx
HeapFree
GetLastError
GetWindowsDirectoryW
GetFileType
TlsGetValue
GetCPInfo
InterlockedExchange
LCMapStringW
HeapAlloc
GetModuleHandleA
LockFileEx
GetEnvironmentStringsW
GetTickCount
TerminateProcess
GetCurrentThread
GetCurrentProcessId
QueryPerformanceCounter
CreateEventA
SetHandleCount
GetStringTypeExA
SetConsoleCursorPosition
GetStdHandle
SetEnvironmentVariableA
WriteFile
GetACP
VirtualQuery
VirtualFreeEx
GetVersion
EnumCalendarInfoW
ExitProcess
GetPrivateProfileSectionNamesA
WritePrivateProfileStructA
SetConsoleCtrlHandler
SetConsoleOutputCP
GetCurrentProcess
SetStdHandle
LoadLibraryA
RtlUnwind
CreateToolhelp32Snapshot
LocalHandle
VirtualAlloc
HeapReAlloc
DeleteCriticalSection
GlobalFlags
InitializeCriticalSection
FoldStringW
TlsAlloc
InterlockedDecrement
SetConsoleMode
LCMapStringA
CompareStringW
GetStringTypeA
GetCommandLineA
CompareStringA
HeapDestroy
ReadFileEx
MapViewOfFile
MultiByteToWideChar
GetSystemTime
LocalLock
GetTimeZoneInformation
TlsFree
IsBadReadPtr
lstrcmpiA
EnterCriticalSection
InterlockedIncrement
WideCharToMultiByte
FileTimeToSystemTime
OpenMutexA
VirtualFree
SetCurrentDirectoryW
GetLocalTime
HeapCreate
FillConsoleOutputCharacterW

comctl32

ImageList_Create
DestroyPropertySheetPage
InitCommonControlsEx

user32

DefDlgProcA
OpenClipboard
ShowCaret
SendNotifyMessageW
ShowScrollBar
DestroyWindow
DlgDirListA
CreateDesktopA
MessageBoxA
CascadeChildWindows
DefWindowProcA
RealGetWindowClass
RegisterClassA
CreateWindowExA
CopyRect
ShowWindow
ToAscii
EndPaint
WaitForInputIdle
EnumDesktopWindows
ShowWindowAsync
GetMessageW
SetWindowsHookA
FindWindowExA
GetWindowThreadProcessId
FlashWindow
CallMsgFilterA
RegisterClassExA

Sections

.text
Size: 264KB - Virtual size: 261KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 392KB - Virtual size: 391KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0c2bc275a694bc27ccbd6faa6993a528

Headers

File Characteristics

Imports

kernel32

comctl32

user32

Sections

.text Size: 264KB - Virtual size: 261KB

.rdata Size: 392KB - Virtual size: 391KB

.data Size: 136KB - Virtual size: 141KB

.rsrc Size: 36KB - Virtual size: 33KB

.text
Size: 264KB - Virtual size: 261KB

.rdata
Size: 392KB - Virtual size: 391KB

.data
Size: 136KB - Virtual size: 141KB

.rsrc
Size: 36KB - Virtual size: 33KB