9e8185fff4f793eba3482886d820e3ba1ec7929de401ef332f35b368e4812174

Sharing

Copy URL

Twitter E-mail

General

Target

9e8185fff4f793eba3482886d820e3ba1ec7929de401ef332f35b368e4812174
Size

288KB
MD5

d36b41417353c72b39333cbddbdbd97e
SHA1

bda3ed5c5a20842a0cc996d02f012c71eb5eed9f
SHA256

9e8185fff4f793eba3482886d820e3ba1ec7929de401ef332f35b368e4812174
SHA512

1f12d5762ec320c3abf6f8f9e795343708609fb54a8c8d5f63b4a3601d19659b4bfb5f7c3bc2bc8c0f2b4dd1f383b0416415e462226d96b58ee8870e4744f106
SSDEEP

6144:jVttqU7zstwWNt/6tRHjg04GrzfFyOlblo7fi7usO:hqjtwWoH00Hzt/lujMuH

Score

N/A

Malware Config

Signatures

Files

9e8185fff4f793eba3482886d820e3ba1ec7929de401ef332f35b368e4812174
.exe windows x86

758a6805a3b5e93c975f64b4d5db09a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMailslotW
GetProcessShutdownParameters
EndUpdateResourceA
CreateMutexA
OutputDebugStringA
GetFileInformationByHandle
WaitCommEvent
ReadConsoleW
BuildCommDCBAndTimeoutsW
GetTempPathW
ConvertDefaultLocale
EscapeCommFunction
SetCommConfig
GetModuleHandleA
WaitForDebugEvent
GetPrivateProfileSectionA
GetTempFileNameA
SetConsoleTitleA
ReadConsoleOutputW
GetVersionExA
WaitForSingleObject
lstrlenA
GetOverlappedResult
SetDefaultCommConfigW
GetCalendarInfoW
DeviceIoControl
FindCloseChangeNotification
OpenWaitableTimerA
ReadDirectoryChangesW
EnumSystemCodePagesW
lstrcmpiA
GetTapePosition
CreatePipe
GlobalDeleteAtom
WriteProfileStringW
GetPrivateProfileIntW
IsBadCodePtr
GetStartupInfoA
WriteFileEx
_hread
GetCurrentDirectoryA
MoveFileExA
VirtualUnlock
CompareFileTime
GetStringTypeExW
EnumTimeFormatsA
SetFileAttributesA
MapViewOfFileEx
SetStdHandle
RequestDeviceWakeup
GetStringTypeExA
AreFileApisANSI
GetProcessHeaps
GetSystemDefaultLangID
LockFile
InterlockedExchange
GenerateConsoleCtrlEvent
GetTickCount
ResumeThread
lstrcpyA
SetFileApisToOEM
GetThreadPriority
GetThreadTimes
AddAtomW
ExpandEnvironmentStringsA
ReadConsoleInputA
RaiseException
FreeResource

user32

SetDoubleClickTime
HiliteMenuItem
CharUpperBuffA
OpenDesktopW
DefDlgProcW
GetThreadDesktop
GetKeyboardLayoutNameA
DefFrameProcA
InvalidateRect
DialogBoxParamA
OpenWindowStationA
SetWindowLongA
SetRect
GetDialogBaseUnits
SetClassWord
TabbedTextOutA
SetCaretPos
GetMenuItemCount
GetFocus
CheckDlgButton
GetCursorPos
EnableMenuItem
BeginDeferWindowPos
CharToOemBuffW
CreateIconIndirect
MessageBoxA
GetMenu
OpenWindowStationW
GetSubMenu
SetRectEmpty
RegisterClipboardFormatA
GetDesktopWindow
SetSysColors
SetPropW
UnhookWindowsHookEx
SetWindowWord
RedrawWindow
LoadMenuA
ClipCursor

gdi32

SetWorldTransform
GetCharWidth32A
CreateEnhMetaFileW
SetMiterLimit
PolyPolygon
UpdateICMRegKeyA
FixBrushOrgEx
SetTextAlign
DrawEscape
SetDIBitsToDevice
CreateBitmapIndirect
ExtCreateRegion
SetBrushOrgEx
GetCharABCWidthsFloatA
CreatePolyPolygonRgn
CreateFontIndirectW
GetRgnBox
LineDDA
GetGlyphOutlineA
SetMapMode
GetDIBColorTable
SetMetaRgn
GetDIBits
AnimatePalette
TranslateCharsetInfo
EnumFontFamiliesW
PtVisible
CreateBrushIndirect
CreateFontA
GetTextCharsetInfo
SetTextColor
SetRectRgn

advapi32

BuildTrusteeWithSidW
MapGenericMask
RegEnumKeyA
GetUserNameA
GetPrivateObjectSecurity
RegReplaceKeyW
CreateProcessAsUserW
QueryServiceConfigA
BuildTrusteeWithSidA
SetNamedSecurityInfoW
SetPrivateObjectSecurity
CryptGetKeyParam
EqualPrefixSid
GetNamedSecurityInfoW
EnumServicesStatusW
RegisterServiceCtrlHandlerA
RegCreateKeyW
LookupPrivilegeValueA
GetSecurityDescriptorLength

shell32

SHGetDataFromIDListW
DuplicateIcon
SHGetPathFromIDListA
CommandLineToArgvW

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

Sections

.text
Size: 271KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

iek3utr.
Size: 55B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

v14rg.yw
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

758a6805a3b5e93c975f64b4d5db09a6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msvcrt

Sections

.text Size: 271KB - Virtual size: 272KB

.rdata Size: 5KB - Virtual size: 8KB

.data Size: 10KB - Virtual size: 12KB

iek3utr. Size: 55B - Virtual size: 4KB

v14rg.yw Size: 512B - Virtual size: 4KB

.text
Size: 271KB - Virtual size: 272KB

.rdata
Size: 5KB - Virtual size: 8KB

.data
Size: 10KB - Virtual size: 12KB

iek3utr.
Size: 55B - Virtual size: 4KB

v14rg.yw
Size: 512B - Virtual size: 4KB