5f33d8e12648b1587cc12ba9270def7b63833bc10041e128bfded6c438e4058c

Sharing

Copy URL

Twitter E-mail

General

Target

5f33d8e12648b1587cc12ba9270def7b63833bc10041e128bfded6c438e4058c
Size

604KB
MD5

8202b93966917230e6fc1f66f2761c18
SHA1

eeb91c80cd52416375e86af94734e98546a82072
SHA256

5f33d8e12648b1587cc12ba9270def7b63833bc10041e128bfded6c438e4058c
SHA512

0477f41c090a19aedf1268fffc02fc1c3ed709a09f4154da0b5658988be3efc023c9ef1e378602946dcbe14a00cf67fa58cd5deed1172bfad1338079fcedfc8c
SSDEEP

12288:0V5ACC4Zly6ND8vBGHPACVAaalZdFq6Adjj9cACVAaalZdFq6Ad9u:0V5JCwtND8vBGHoEajOEajCu

Score

N/A

Malware Config

Signatures

Files

5f33d8e12648b1587cc12ba9270def7b63833bc10041e128bfded6c438e4058c
.exe windows x86

83a2ac7707b4ac7b534e2a5efd88f255

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetClientRect
IsIconic
DrawIcon
GetSystemMetrics
LoadIconA
EnableWindow
SendMessageA
TrackPopupMenu
GetMenuItemRect
GetFocus
GetClipboardViewer
CopyAcceleratorTableW
LoadCursorFromFileA
LoadAcceleratorsA
GetMenuItemCount
ClipCursor
ChangeClipboardChain
GetKeyboardLayoutList
ShowCaret
SendNotifyMessageW
DrawTextExW
TranslateMessage
CreateWindowExW
FillRect
DestroyMenu
GetClipCursor
CharPrevA
DispatchMessageW
SetCaretPos
GetDlgItemTextA
PostQuitMessage
CharLowerBuffA
DdeQueryStringA
GetQueueStatus
GetSysColor
GetDlgCtrlID
ShowOwnedPopups
IsWindowEnabled
IsClipboardFormatAvailable
SetWindowLongA
EndDialog
keybd_event
ToAscii
PtInRect
CreatePopupMenu
DrawFrameControl
CheckMenuItem
RegisterWindowMessageA
EnumClipboardFormats
SetClassLongW
GetClassLongA
GetDlgItem
GetClipboardData
CharLowerW
GetDC
CharUpperBuffW
DrawStateA
GetCaretPos
MapVirtualKeyExA
SetRectEmpty
ReleaseDC
MapVirtualKeyW
PeekMessageW
SetWindowPos
MapWindowPoints
GetMessageW
DdeConnect
UnhookWindowsHook
CopyIcon
DdeDisconnect
InsertMenuA
GetPropA
LoadMenuW
MapVirtualKeyExW
MessageBoxExW
EnableMenuItem
UnionRect
IsMenu
PostMessageW
GetClassInfoW
CharToOemA
CreateDialogIndirectParamA
GetMenuItemID
DestroyCaret
DdeFreeStringHandle
PostMessageA
ValidateRgn
GetForegroundWindow
GetWindowThreadProcessId
LoadBitmapA
IsCharLowerA
GetLastActivePopup
CreateWindowExA
DrawStateW
GetKeyNameTextW
CharToOemBuffA
DdeCreateStringHandleW
GetClassNameA
FrameRect
VkKeyScanExA

advapi32

RegCloseKey
AllocateAndInitializeSid
QueryServiceConfig2A
InitiateSystemShutdownA
SetNamedSecurityInfoW
SetSecurityDescriptorSacl
ReadEventLogW
QueryServiceLockStatusW
LsaOpenPolicy
RegFlushKey
RegQueryInfoKeyA
RegisterServiceCtrlHandlerA
RegQueryMultipleValuesW
SetServiceObjectSecurity
SetThreadToken
RegQueryInfoKeyW
AddAce
ChangeServiceConfigW
SetTokenInformation
InitializeSecurityDescriptor
RegCreateKeyExA
LogonUserA
SetFileSecurityA
SetSecurityDescriptorGroup
OpenServiceA
RegOpenKeyExW
StartServiceCtrlDispatcherW
QueryServiceConfigA
CreateProcessAsUserA
OpenSCManagerA
InitializeSid
ReportEventA
RegOverridePredefKey
StartServiceW
LookupAccountSidA
DecryptFileW
QueryServiceConfigW
RegisterServiceCtrlHandlerW
RegEnumKeyW
StartServiceCtrlDispatcherA
EnumDependentServicesA
RegDeleteKeyW
RegSetValueExA
ChangeServiceConfigA
StartServiceA
GetLengthSid
GetServiceDisplayNameW
RegEnumKeyExA
GetEffectiveRightsFromAclW
FreeSid
ChangeServiceConfig2W
GetSidSubAuthorityCount
LookupPrivilegeValueA
AdjustTokenPrivileges
ImpersonateSelf
RegOpenKeyExA
GetFileSecurityW
RegDeleteValueW
RegNotifyChangeKeyValue
LookupPrivilegeValueW
GetSidSubAuthority
RegSetValueW
AddAccessAllowedAce
IsTokenRestricted
SetKernelObjectSecurity
GetSidLengthRequired
MakeSelfRelativeSD
SetEntriesInAclA
GetUserNameA
LsaRetrievePrivateData
LookupAccountNameA
RegReplaceKeyA
GetUserNameW
RevertToSelf
OpenEventLogW
RegUnLoadKeyW
DeleteService
CreateServiceW
QueryServiceLockStatusA
LockServiceDatabase
LsaFreeMemory
EnumServicesStatusA
PrivilegedServiceAuditAlarmA
LsaQueryInformationPolicy
CloseServiceHandle
ControlService
SetServiceStatus
GetServiceKeyNameW
RegConnectRegistryA
OpenProcessToken
ChangeServiceConfig2A
GetAce
RegCreateKeyA
RegCreateKeyW
ReportEventW
LsaAddAccountRights
EncryptFileW
GetSecurityDescriptorDacl
SetEntriesInAclW
SetFileSecurityW
RegisterEventSourceA
EnumDependentServicesW
QueryServiceStatus
RegSetKeySecurity
RegQueryValueW
CreateProcessAsUserW
RegSetValueA
GetKernelObjectSecurity
SetSecurityDescriptorDacl
OpenSCManagerW
RegLoadKeyA
RegQueryValueA
CopySid
MakeAbsoluteSD
RegCreateKeyExW
RegRestoreKeyW
ObjectCloseAuditAlarmW
RegSetValueExW
SetSecurityDescriptorOwner
GetSidIdentifierAuthority

msvcrt

_setmbcp
_Getmonths
__set_app_type
_wexecve
ldiv
__dllonexit
_onexit
frexp
_mbsncpy
_y1
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_controlfp

kernel32

GetModuleHandleA
GetThreadTimes
GetCurrentProcessId
GetDiskFreeSpaceExW
GetStartupInfoA
CreateConsoleScreenBuffer

imm32

ImmGetVirtualKey
ImmGetGuideLineA
ImmGetCompositionStringA
ImmUnregisterWordA
ImmSetCompositionStringA
ImmConfigureIMEA
ImmGetCompositionFontA
ImmGetCandidateListA

mfc42

ord4274
ord6375
ord4486
ord2554
ord1047
ord5731
ord3922
ord1089
ord1022
ord2396
ord3346
ord1050
ord5302
ord2725
ord1067
ord4698
ord5307
ord1093
ord5714
ord2982
ord1081
ord3259
ord4465
ord1091
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord1063
ord4080
ord1040
ord4424
ord3738
ord561
ord815
ord2514
ord641
ord5265
ord4376
ord4853
ord4998
ord6052
ord4078
ord1775
ord4407
ord1089
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord1092
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord1089
ord1045
ord1097
ord4627
ord4425
ord1084
ord324
ord4234
ord4710
ord1168
ord1064
ord755
ord470
ord2379
ord1576

Sections

.text
Size: 356KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 216KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83a2ac7707b4ac7b534e2a5efd88f255

Headers

File Characteristics

Imports

user32

advapi32

msvcrt

kernel32

imm32

mfc42

Sections

.text Size: 356KB - Virtual size: 352KB

.rdata Size: 216KB - Virtual size: 212KB

.data Size: 12KB - Virtual size: 2.8MB

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 356KB - Virtual size: 352KB

.rdata
Size: 216KB - Virtual size: 212KB

.data
Size: 12KB - Virtual size: 2.8MB

.rsrc
Size: 16KB - Virtual size: 15KB