b2f67631669530beb2f687650c79e42e9e627aac779aab5a0718874180769803

Sharing

Copy URL Twitter E-mail

General

Target

b2f67631669530beb2f687650c79e42e9e627aac779aab5a0718874180769803
Size

62KB
MD5

c03264cbec138a0b00ea51530baeea3e
SHA1

32e20bb42ab5d33980eea08bf76bcc054cbf62f2
SHA256

b2f67631669530beb2f687650c79e42e9e627aac779aab5a0718874180769803
SHA512

ef4f606c1074fcc6039f0c6d943d4ca9681075027f1b42d71a70ccb4a4ad1264cc9e77f26ab5f1caab5e71ca60395271c0015973112758e48e26ba26aa72e0db
SSDEEP

768:5ww4LeEnsjJ3Td2RSGVLlxz+sq3uh/mvJKqaU4uJRU00OTJ9lIVlJPF:5wDdnsFRCSuLlxz+t3QmIqEuLjJ9Cp

Score

N/A

Malware Config

Signatures

Files

b2f67631669530beb2f687650c79e42e9e627aac779aab5a0718874180769803
.exe windows x86

ab98eb43e5ddae71e0055899149bc746

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageW
HeapReAlloc
CloseHandle
OpenProcess
TerminateProcess
lstrcmpW
GetStdHandle
WriteConsoleW
GetOEMCP
WideCharToMultiByte
HeapAlloc
WriteFile
GetModuleHandleW
CreateFileA
SetEndOfFile
GetConsoleOutputCP
WriteConsoleA
HeapSize
GetLocaleInfoA
GetStringTypeA
GetCurrentProcessId
GetConsoleWindow
GetTickCount
Sleep
VirtualAlloc
GetProcessHeap
HeapFree
LCMapStringW
LCMapStringA
CreateFileW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
GetSystemTimeAsFileTime
QueryPerformanceCounter
VirtualFree
HeapCreate
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetModuleFileNameA
GetStringTypeW
GetProcAddress
ExitProcess
MultiByteToWideChar
GetLastError
ReadFile
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
SetFilePointer
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId

gdi32

CreateRectRgnIndirect
PlayEnhMetaFile
ExcludeClipRect
GetTextExtentPointA
CreateEllipticRgn
DescribePixelFormat

winmm

midiInGetID
mmioRenameA
waveInGetDevCapsW
midiOutCachePatches
timeKillEvent

setupapi

SetupCreateDiskSpaceListA
SetupCloseLog
SetupAdjustDiskSpaceListA

rtutils

TraceRegisterExA
TracePrintfExA
RouterLogEventStringW
RouterGetErrorStringA
RouterLogEventA

comdlg32

GetSaveFileNameW
ChooseColorW
ChooseColorA
GetFileTitleW
GetOpenFileNameW
CommDlgExtendedError

shell32

WOWShellExecute
ShellExecuteA
ShellExecuteExA

odbc32

ord255
ord232
ord235
ord8
ord156
ord63
ord35
ord136
ord170
ord29

loadperf

LoadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA
LoadPerfCounterTextStringsA
UnloadPerfCounterTextStringsW

user32

PostMessageW
GetWindowThreadProcessId
EnumWindows
ShowWindow
LoadStringW

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab98eb43e5ddae71e0055899149bc746

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

winmm

setupapi

rtutils

comdlg32

shell32

odbc32

loadperf

user32

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 11KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 11KB

.reloc
Size: 4KB - Virtual size: 3KB