40979f59e102497b13f2d2a87aabedc75ccbf9574975ba8d3b1de480912a15ad

Sharing

Copy URL

Twitter E-mail

General

Target

40979f59e102497b13f2d2a87aabedc75ccbf9574975ba8d3b1de480912a15ad
Size

368KB
MD5

1796dc56da53130558bba66f2a041e45
SHA1

09d6e9ba0baf88bd53b685c7dbbe4943daad82d3
SHA256

40979f59e102497b13f2d2a87aabedc75ccbf9574975ba8d3b1de480912a15ad
SHA512

2fba280fe2868261a5cd50f3978290b871d0312c077471697eb8b4448ee15e1232e05bd55476801bffb7875cc98746d3f2a6e62b8daea03e3ae4fbc273d31fb8
SSDEEP

6144:zbXofeVfgK9bZrUmn3t49U9fW/g3C2qvSXt/XbYHJ6HfBnMwnctf12VSPkdJoLeC:zbX4eVT9bNUm3KaZTC5veg6/X/oSBq

Score

N/A

Malware Config

Signatures

Files

40979f59e102497b13f2d2a87aabedc75ccbf9574975ba8d3b1de480912a15ad
.exe windows x86

e12f7b497694788540342a51790cc900

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_heapset
_acmdln
__dllonexit
fwscanf
_onexit
abs
_outpd
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
memcpy
_controlfp
cosh

user32

DeferWindowPos
GetClipboardFormatNameW
GetDlgCtrlID
DefFrameProcW
ModifyMenuA
GetClassInfoW
ValidateRect
AdjustWindowRect
SetCaretPos
CharNextW
DestroyMenu
WindowFromPoint
CharPrevW
AttachThreadInput
DrawStateW
GetWindowTextA
IsDlgButtonChecked
WaitMessage
RegisterClipboardFormatA
GetMenu
CharUpperW
SetCursor
InsertMenuA
SetMenuDefaultItem
CheckMenuItem
SetWindowLongW

advapi32

GetSidLengthRequired
CreateServiceA
CreateProcessAsUserA
OpenServiceA
RegOpenKeyExA
RevertToSelf
GetLengthSid
LogonUserA
ControlService
EnumDependentServicesA
GetUserNameA
RegSetValueExA
GetSidSubAuthority
StartServiceCtrlDispatcherA
GetSidIdentifierAuthority
LookupPrivilegeValueW
ChangeServiceConfigW
RegisterServiceCtrlHandlerA
LockServiceDatabase
AllocateAndInitializeSid
RegOverridePredefKey
SetEntriesInAclW
RegCloseKey
RegQueryValueA
GetFileSecurityW
InitializeSecurityDescriptor
StartServiceCtrlDispatcherW
InitializeSid
CreateServiceW
OpenThreadToken
MakeAbsoluteSD
LookupAccountNameW
SetNamedSecurityInfoW
CreateProcessAsUserW
RegRestoreKeyW
CloseServiceHandle
RegNotifyChangeKeyValue
RegEnumKeyW
ReadEventLogW
QueryServiceConfigW
SetSecurityDescriptorGroup
RegCreateKeyW
SetSecurityDescriptorOwner
GetAclInformation
OpenSCManagerA
LsaFreeMemory
ReportEventW
LsaQueryInformationPolicy
GetServiceDisplayNameW
AdjustTokenPrivileges
OpenProcessToken
RegCreateKeyExA
LsaOpenPolicy
GetAce
RegQueryInfoKeyW
OpenSCManagerW
GetKernelObjectSecurity
SetSecurityDescriptorSacl
RegEnumKeyExA
GetUserNameW
RegOpenKeyExW
SetKernelObjectSecurity
EnumServicesStatusA
CopySid

gdi32

StrokePath
GetFontData
RealizePalette
EnumMetaFile
GetObjectA
SetBkColor
GetPixel
RestoreDC
ExtFloodFill
DPtoLP
EndPath
SetBkMode
EnumFontFamiliesExW
EqualRgn
RemoveFontResourceA
FillPath
GetTextExtentPoint32A
SetPolyFillMode
StartDocW
Pie
SetRectRgn
OffsetRgn
SaveDC
CreateRoundRectRgn
ScaleWindowExtEx
AbortDoc
CreateICW
UpdateColors

version

VerQueryValueW
VerQueryValueA
VerInstallFileA
VerInstallFileW

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 541KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 224KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e12f7b497694788540342a51790cc900

Headers

File Characteristics

Imports

msvcrt

user32

advapi32

gdi32

version

Sections

.text Size: 72KB - Virtual size: 68KB

.rdata Size: 60KB - Virtual size: 57KB

.data Size: 8KB - Virtual size: 541KB

.rsrc Size: 224KB - Virtual size: 222KB

.text
Size: 72KB - Virtual size: 68KB

.rdata
Size: 60KB - Virtual size: 57KB

.data
Size: 8KB - Virtual size: 541KB

.rsrc
Size: 224KB - Virtual size: 222KB