be738382dbad8b7464b11c528ebddb45[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

be738382dbad8b7464b11c528ebddb45.exe
Size

1.4MB
MD5

be738382dbad8b7464b11c528ebddb45
SHA1

dafeca3a1f94a721966898782a65ae079b98aa5b
SHA256

9fa94a3f17c838980aaeeb6bcd747ec663cb44c198b7c69f52dd23f39d282c87
SHA512

83470c55302654984657b1468db0882688137ceb94900ae0ef831695d7d934d10fa54bab57fe49c5993444de13e819190de3cb1e67e9b216763aa69fe0fd335e
SSDEEP

24576:RwZgwzE8j6NuwKFgEmvg20iiCkYpgZO8WwFDC0TbjbY+wUcOJha3ByBeJnXE1+PV:RwZfzNwKnx/irDuZOfSLbD5ABO8nXEOV

Score

N/A

Malware Config

Signatures

Files

be738382dbad8b7464b11c528ebddb45.exe
.exe windows x86

9f2c76418357be5cdc291649da90bd66

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
FileTimeToDosDateTime
GetFileSize
lstrlenA
TlsGetValue
MapViewOfFile
GetSystemDefaultUILanguage
LoadResource
HeapAlloc
HeapFree
GetEnvironmentStringsW
GetTickCount
GetProcessHeap
IsBadReadPtr
GetUserDefaultLangID
OpenProcess
GetLocaleInfoW
Sleep
HeapDestroy
LeaveCriticalSection
HeapCreate
FileTimeToSystemTime
ReadFile
GetModuleFileNameW
CreateFileW
GetACP
lstrlenW
FlushFileBuffers
GetLastError
SetLastError
IsValidCodePage
RemoveDirectoryA
Process32FirstW
OpenThread
GetLargePageMinimum
ExitProcess
GetModuleHandleA
VirtualProtect
CreateToolhelp32Snapshot
WaitForDebugEvent
GetCurrentThreadId
CloseHandle
GetCurrentProcessId
GetStringTypeW
MultiByteToWideChar
LCMapStringW
WideCharToMultiByte
LoadLibraryW
HeapSize
RtlUnwind
EnterCriticalSection
HeapReAlloc
GetOEMCP
GetCPInfo
GetSystemTimeAsFileTime
QueryPerformanceCounter
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
Process32NextW
GetSystemDefaultLangID
DeleteCriticalSection
GetFileType
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
GetProcAddress
GetModuleHandleW
WriteFile
GetStdHandle
FreeEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount

user32

OpenIcon
IsIconic
FillRect
GetMessageExtraInfo
GetTopWindow
IsZoomed
GetLastActivePopup
LoadBitmapA
GetParent
GetDC
GetForegroundWindow
ReleaseDC
GetDesktopWindow
ShowWindow
CreatePopupMenu
IsWindow
CreateWindowExW
IsWow64Message
MessageBoxW
IsWindowVisible
UpdateWindow
CallWindowProcA
GetDlgCtrlID
GetDialogBaseUnits
GetMessagePos
GetWindowTextLengthA

gdi32

GetStockObject

psapi

GetModuleFileNameExW

Sections

qOI8?ja?
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

yhG7M;[u
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

iL/ok,PQ
Size: 4KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

:s:J?hoF
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

jhI7pVje
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f2c76418357be5cdc291649da90bd66

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

psapi

Sections

qOI8?ja? Size: 1.3MB - Virtual size: 1.3MB

yhG7M;[u Size: 20KB - Virtual size: 19KB

iL/ok,PQ Size: 4KB - Virtual size: 2.6MB

:s:J?hoF Size: 2KB - Virtual size: 2KB

jhI7pVje Size: 16KB - Virtual size: 16KB

qOI8?ja?
Size: 1.3MB - Virtual size: 1.3MB

yhG7M;[u
Size: 20KB - Virtual size: 19KB

iL/ok,PQ
Size: 4KB - Virtual size: 2.6MB

:s:J?hoF
Size: 2KB - Virtual size: 2KB

jhI7pVje
Size: 16KB - Virtual size: 16KB