cec54379d0c951fbe85b7f678bc3faab29bd9643375825d105a568ba2890abbf

Sharing

Copy URL

Twitter E-mail

General

Target

cec54379d0c951fbe85b7f678bc3faab29bd9643375825d105a568ba2890abbf
Size

804KB
MD5

9d6680e9b0807d476ce0f39ead7f6b2a
SHA1

fb65b9487a06464440cf86eb583ee68c34b4bd5d
SHA256

cec54379d0c951fbe85b7f678bc3faab29bd9643375825d105a568ba2890abbf
SHA512

4e7e93756d1f60ae7a472a80f04760e4b0fafeedcd3c8f83fbf85001cfb96ce96b287eb2f1621f5a68d13de11588b7eef480f047a667438af13816e05f68987e
SSDEEP

12288:DtTcweO9FJDptWpdGQVAmJPX9+DEkoYwzreip1DRtMqy59ozgu6Rz3K1CRjrLmfl:qweYxpspddz9vLaizgP5mN+za1ALm3N

Score

N/A

Malware Config

Signatures

Files

cec54379d0c951fbe85b7f678bc3faab29bd9643375825d105a568ba2890abbf
.exe windows x86

c738f92b2dfa13c4c7af39b663d17ff3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

SetSecurityDescriptorGroup
RegQueryValueExW
RegOpenKeyW
OpenThreadToken
OpenServiceW
StartServiceCtrlDispatcherW
RegOpenKeyExW
InitializeSecurityDescriptor
FreeSid
OpenProcessToken
RegSetValueExW
RegisterServiceCtrlHandlerW
RegCreateKeyExW
SetServiceStatus
AllocateAndInitializeSid
OpenSCManagerW
SetSecurityDescriptorOwner
QueryServiceStatus
RegEnumKeyW
RegCloseKey
SetSecurityDescriptorDacl
LookupPrivilegeValueW

kernel32

FileTimeToLocalFileTime
CreateProcessW
OpenMutexW
CloseHandle
DecodePointer
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetFilePointerEx
WriteConsoleW
HeapQueryInformation
HeapSize
HeapReAlloc
HeapFree
GetProcessHeap
LCMapStringW
CompareStringW
CreateEventW
SetFileAttributesW
GetVersion
GetSystemDirectoryW
GetCurrentThreadId
GetModuleFileNameW
RemoveDirectoryW
VirtualProtect
GetVolumeInformationW
GetCurrentDirectoryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapValidate
GetSystemInfo
GetCPInfo
OutputDebugStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
CreateFileW

user32

ReleaseDC
GetClassInfoExW
SystemParametersInfoW
EnumWindows
FrameRect
GetWindowLongW
GetWindowTextLengthW
DefWindowProcW
CreateWindowExW
CallNextHookEx
RegisterClassExW
ClientToScreen

winmm

waveOutPrepareHeader
waveOutOpen
waveOutClose
timeBeginPeriod
timeEndPeriod

crypt32

CertVerifyCertificateChainPolicy
CryptImportPublicKeyInfo
CertOpenStore
CertFreeCertificateChain
CertEnumCertificatesInStore
CertFreeCertificateContext
CertGetCertificateChain
CryptHashPublicKeyInfo
CertCreateCertificateContext

Sections

.text
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 259KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1008KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c738f92b2dfa13c4c7af39b663d17ff3

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

winmm

crypt32

Sections

.text Size: 380KB - Virtual size: 380KB

.rdata Size: 259KB - Virtual size: 259KB

.data Size: 2KB - Virtual size: 1008KB

.rsrc Size: 161KB - Virtual size: 160KB

.text
Size: 380KB - Virtual size: 380KB

.rdata
Size: 259KB - Virtual size: 259KB

.data
Size: 2KB - Virtual size: 1008KB

.rsrc
Size: 161KB - Virtual size: 160KB