b298814935c4e379bd6bf43978d3697f8f357bb5b02e27ab32d4071211221423

Sharing

Copy URL Twitter E-mail

General

Target

b298814935c4e379bd6bf43978d3697f8f357bb5b02e27ab32d4071211221423
Size

3.2MB
MD5

2238b0d5992428e5e3d81edbbfaa7352
SHA1

6f8cef718c743285cd3f5493ad090f77417d9056
SHA256

b298814935c4e379bd6bf43978d3697f8f357bb5b02e27ab32d4071211221423
SHA512

b2caef62b35a296f52306706eae46ec8dc82145d1b1dd90fb1dea17fa48e4708b764c59cf7b751967ea933aabe3be51b5a1d3f7f7a0e22b6d03695d4dac03a0c
SSDEEP

49152:dU/VUmwnruZoZrwo4vmccDwZVh4PGnNuyKW91Oud:dU/k0oNpcQquyKIT

Score

N/A

Malware Config

Signatures

Files

b298814935c4e379bd6bf43978d3697f8f357bb5b02e27ab32d4071211221423
.exe windows x86

128ac6bbd8705db8b12378daaa293b10

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GlobalAddAtomA
FreeLibrary
Sleep
WinExec
WriteFile
CreateFileA
LockResource
SizeofResource
LoadResource
FindResourceA
LoadLibraryA
GetVolumeInformationA
CreateDirectoryA
GetDriveTypeA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetModuleFileNameA
GetProcAddress
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
Beep
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
ReadFile
SetFilePointer
FlushFileBuffers
SetStdHandle
VirtualAlloc
HeapReAlloc
HeapAlloc
SetConsoleCtrlHandler
RtlUnwind
VirtualFree
HeapFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
SetHandleCount
GetEnvironmentStringsW
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
DeleteFileA
CopyFileA
SetEndOfFile
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
WideCharToMultiByte
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
IsBadWritePtr
IsBadReadPtr
HeapValidate
SetEnvironmentVariableA

user32

SendDlgItemMessageA
MessageBoxA
SendMessageA
KillTimer
SetFocus
DialogBoxParamA
UnregisterHotKey
wsprintfA
SetTimer
SetForegroundWindow
GetDlgItem
EnableWindow
IsDlgButtonChecked
CheckDlgButton
EndDialog
FindWindowA
PostMessageA
PostQuitMessage
LoadIconA
LoadMenuA
CreateDialogParamA
ShowWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
RegisterHotKey

advapi32

GetUserNameA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

shell32

ShellExecuteA

ws2_32

gethostbyname
gethostname
WSAStartup
WSACleanup

Sections

.text
Size: 192KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

128ac6bbd8705db8b12378daaa293b10

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ws2_32

Sections

.text Size: 192KB - Virtual size: 190KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 20KB - Virtual size: 31KB

.idata Size: 8KB - Virtual size: 4KB

.rsrc Size: 2.9MB - Virtual size: 2.9MB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 192KB - Virtual size: 190KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 20KB - Virtual size: 31KB

.idata
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

.reloc
Size: 16KB - Virtual size: 15KB