b58d8e66ad491502ebd54048666b066f3015ba527a8cdc8a0109f204b4906ab9

Sharing

Copy URL Twitter E-mail

General

Target

b58d8e66ad491502ebd54048666b066f3015ba527a8cdc8a0109f204b4906ab9
Size

2.0MB
MD5

270a4962f6c65649d96ceda664a7c54d
SHA1

cef14d9ebcbcabefc9c7fc185188c83af7a5fce2
SHA256

b58d8e66ad491502ebd54048666b066f3015ba527a8cdc8a0109f204b4906ab9
SHA512

2d8402227f7a22276a4ae0316db73255ae71c758548c7fd6bcb3c9ca5657bcf7aeb1aa7211b1b0e593e216c34fd9cafb1d4d6436892bd76135aa47b768887337
SSDEEP

49152:EMNjzds/dxOwquRzHdttfJh5YFnHHJa/jXhoknszg5aYYJWVXZ:lMuuxHdttBh5Yjyloknszg5aYYO

Score

1^/10

Malware Config

Signatures

Files

b58d8e66ad491502ebd54048666b066f3015ba527a8cdc8a0109f204b4906ab9
.exe windows x86

0438b75b4dd5ace0680dae5b17f15a01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
RemoveDirectoryW
GetSystemDirectoryW
LCMapStringA
SetEndOfFile
HeapSize
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLocaleInfoA
VirtualProtect
VirtualQuery
InterlockedExchange
RtlUnwind
LoadLibraryA
GetCPInfo
GetOEMCP
FlushFileBuffers
SetStdHandle
SetFilePointer
GetStringTypeW
WideCharToMultiByte
GetStringTypeA
GetStartupInfoA
GetFileType
GetTempPathW
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
MultiByteToWideChar
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
TerminateProcess
ExitProcess
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetStartupInfoW
GetModuleHandleA
lstrlenW
SizeofResource
LockResource
FreeResource
GetFileAttributesW
CloseHandle
LoadLibraryW
GetProcAddress
FreeLibrary
CreateDirectoryW
GetWindowsDirectoryW
WritePrivateProfileStringW
FindResourceW
LoadResource
CopyFileW
GetCurrentProcess
GetVersionExW
GetSystemInfo
GetSystemDefaultLCID
GetModuleFileNameW
GetACP
GetDriveTypeW
GetDiskFreeSpaceExW
GetSystemTimeAsFileTime
GetLastError
HeapAlloc
HeapFree
GetDiskFreeSpaceW
CreateFileW
ReadFile
SetHandleCount
LCMapStringW

user32

LoadStringW
LoadIconW
SendMessageW
GetMessageW
DispatchMessageW
IsDialogMessageW
TranslateMessage
LoadCursorW
RegisterClassExW
SetFocus
PostQuitMessage
DefWindowProcW
FillRect
SetWindowTextW
SetRect
CheckDlgButton
GetParent
GetDlgItemTextW
SetDlgItemTextW
IsDlgButtonChecked
DestroyWindow
DialogBoxParamW
BeginPaint
EndPaint
KillTimer
EndDialog
CreateDialogParamW
ShowWindow
UpdateWindow
PostMessageW
MessageBoxW
InvalidateRect
ExitWindowsEx
GetDC
ReleaseDC
LoadBitmapW
SetTimer
CreateWindowExW
FindWindowW
SetForegroundWindow
GetSystemMetrics
GetClientRect
GetWindowRect
SetWindowPos
GetDlgItem

gdi32

GetTextMetricsW
CreateSolidBrush
StretchDIBits
UpdateColors
SelectPalette
RealizePalette
DeleteObject
SetBkMode
SetTextColor
TextOutW
GetObjectW
SelectObject
StretchBlt
DeleteDC
BitBlt
CreateCompatibleDC

advapi32

OpenProcessToken
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
LookupPrivilegeValueW
AdjustTokenPrivileges

shell32

SHBrowseForFolderW
ShellExecuteW
SHGetSpecialFolderPathW
SHGetPathFromIDListW

ole32

CoCreateInstance
CoInitialize
CoUninitialize

comctl32

ord17
ImageList_Create
ImageList_ReplaceIcon

shlwapi

PathFileExistsW

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75.9MB - Virtual size: 75.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0438b75b4dd5ace0680dae5b17f15a01

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

comctl32

shlwapi

Sections

.text Size: 44KB - Virtual size: 42KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 16KB

.rsrc Size: 75.9MB - Virtual size: 75.9MB

.text
Size: 44KB - Virtual size: 42KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 16KB

.rsrc
Size: 75.9MB - Virtual size: 75.9MB