c7cf32f1a17f0f936a5f67418b51f03e9a5d42a376caa46a3aaa2e4c9688173c

Sharing

Copy URL

Twitter E-mail

General

Target

c7cf32f1a17f0f936a5f67418b51f03e9a5d42a376caa46a3aaa2e4c9688173c
Size

165KB
MD5

7d99ebf5171054504f3334e1317a763d
SHA1

893504b39f7b53a455e7b369ac05957ae7865221
SHA256

c7cf32f1a17f0f936a5f67418b51f03e9a5d42a376caa46a3aaa2e4c9688173c
SHA512

9e950b98cd99e3c782cf586720a9fb7e61807c5c13bef76956a360402f8a845371cd27b91e6306977fc1480720ff192e955fd187853c2f52ba53440fc564ccfd
SSDEEP

3072:WTx5tsjX9Bxrc3ipxuSc9pn22+lSpAh5ivNS:WTrtuX1ruimx/n22FAh0M

Score

N/A

Malware Config

Signatures

Files

c7cf32f1a17f0f936a5f67418b51f03e9a5d42a376caa46a3aaa2e4c9688173c
.exe windows x86

5dad5efa398a6c6ba85da33a7ef43ba5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

OpenProcessToken
OpenThreadToken
AllocateAndInitializeSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
LookupPrivilegeValueA
RegCloseKey
RegCreateKeyExA
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
OpenSCManagerA
OpenServiceA
QueryServiceStatus
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA

user32

CreateWindowExA
IsWindow
EnableWindow
UnhookWinEvent
GetScrollInfo
SetScrollInfo
LoadIconA
SetMenuItemInfoA

gdi32

SelectClipRgn
GetStockObject
CreateRectRgn
CreateFontA
GetPixel

comctl32

ImageList_DragShowNolock
ImageList_ReplaceIcon

comdlg32

GetOpenFileNameA
GetSaveFileNameA
ChooseColorA
GetFileTitleA

ole32

CoUninitialize
CoRevokeClassObject
CoInitialize

crypt32

CertFindCertificateInStore
CertCreateCertificateContext
CertFreeCertificateChain
CertFreeCertificateContext
CertAddCertificateContextToStore
CertVerifyCertificateChainPolicy
CryptDecodeObject
CryptImportPublicKeyInfo
CertGetCertificateChain
CryptHashPublicKeyInfo
CryptHashCertificate

avifil32

AVIMakeFileFromStreams
AVIStreamSetFormat
AVIStreamFindSample
AVIStreamRelease
AVIFileExit
AVIFileInit

kernel32

GetCPInfo
HeapReAlloc
GetConsoleCP
GetStringTypeW
OutputDebugStringW
GetOEMCP
GetConsoleMode
SetEnvironmentVariableA
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
FlushFileBuffers
GetVersion
VirtualProtect
GetCurrentThreadId
Sleep
GetSystemInfo
FileTimeToSystemTime
CreateEventA
GetModuleFileNameA
CreateProcessA
GetEnvironmentVariableA
GetTempPathA
SetFileAttributesA
GetVolumeInformationA
RaiseException
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExA
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineW
IsProcessorFeaturePresent
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
SetLastError
GetTimeZoneInformation
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
CompareStringW
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
IsValidCodePage
GetACP
CreateFileW

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 1005KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5dad5efa398a6c6ba85da33a7ef43ba5

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

user32

gdi32

comctl32

comdlg32

ole32

crypt32

avifil32

kernel32

Sections

.text Size: 99KB - Virtual size: 98KB

.rdata Size: 47KB - Virtual size: 46KB

.data Size: 5KB - Virtual size: 1005KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 99KB - Virtual size: 98KB

.rdata
Size: 47KB - Virtual size: 46KB

.data
Size: 5KB - Virtual size: 1005KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 10KB - Virtual size: 9KB