5c16ecb0ee63f0634cf71bbf3a5480ab1f852b07a0bf8bfe31a5617f855b1808

Sharing

Copy URL

Twitter E-mail

General

Target

5c16ecb0ee63f0634cf71bbf3a5480ab1f852b07a0bf8bfe31a5617f855b1808
Size

368KB
MD5

0d6a6eb4b2d5aa9ceed96788726235f3
SHA1

fdc6dd979fb3ed449f4f9cb7cb2339dd865e04a1
SHA256

5c16ecb0ee63f0634cf71bbf3a5480ab1f852b07a0bf8bfe31a5617f855b1808
SHA512

3bcf276ddb79c677f18fbbdf2773aa1ac3f714b3b0d6fd2d25bb24860629f0df15b82707bcfb8c488913ad0977fddc530f61f40515bbd5d19728eb3caf3e8c6c
SSDEEP

6144:XbXofeVfgK9bZrUmn3t49U9fW/g3C2qvSXt/XbYHJ6HfBnMwnctf12VSPkdJoLeC:XbX4eVT9bNUm3KaZTC5veg6/X/oSBq

Score

N/A

Malware Config

Signatures

Files

5c16ecb0ee63f0634cf71bbf3a5480ab1f852b07a0bf8bfe31a5617f855b1808
.exe windows x86

e12f7b497694788540342a51790cc900

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_heapset
_acmdln
__dllonexit
fwscanf
_onexit
abs
_outpd
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
memcpy
_controlfp
cosh

user32

DeferWindowPos
GetClipboardFormatNameW
GetDlgCtrlID
DefFrameProcW
ModifyMenuA
GetClassInfoW
ValidateRect
AdjustWindowRect
SetCaretPos
CharNextW
DestroyMenu
WindowFromPoint
CharPrevW
AttachThreadInput
DrawStateW
GetWindowTextA
IsDlgButtonChecked
WaitMessage
RegisterClipboardFormatA
GetMenu
CharUpperW
SetCursor
InsertMenuA
SetMenuDefaultItem
CheckMenuItem
SetWindowLongW

advapi32

GetSidLengthRequired
CreateServiceA
CreateProcessAsUserA
OpenServiceA
RegOpenKeyExA
RevertToSelf
GetLengthSid
LogonUserA
ControlService
EnumDependentServicesA
GetUserNameA
RegSetValueExA
GetSidSubAuthority
StartServiceCtrlDispatcherA
GetSidIdentifierAuthority
LookupPrivilegeValueW
ChangeServiceConfigW
RegisterServiceCtrlHandlerA
LockServiceDatabase
AllocateAndInitializeSid
RegOverridePredefKey
SetEntriesInAclW
RegCloseKey
RegQueryValueA
GetFileSecurityW
InitializeSecurityDescriptor
StartServiceCtrlDispatcherW
InitializeSid
CreateServiceW
OpenThreadToken
MakeAbsoluteSD
LookupAccountNameW
SetNamedSecurityInfoW
CreateProcessAsUserW
RegRestoreKeyW
CloseServiceHandle
RegNotifyChangeKeyValue
RegEnumKeyW
ReadEventLogW
QueryServiceConfigW
SetSecurityDescriptorGroup
RegCreateKeyW
SetSecurityDescriptorOwner
GetAclInformation
OpenSCManagerA
LsaFreeMemory
ReportEventW
LsaQueryInformationPolicy
GetServiceDisplayNameW
AdjustTokenPrivileges
OpenProcessToken
RegCreateKeyExA
LsaOpenPolicy
GetAce
RegQueryInfoKeyW
OpenSCManagerW
GetKernelObjectSecurity
SetSecurityDescriptorSacl
RegEnumKeyExA
GetUserNameW
RegOpenKeyExW
SetKernelObjectSecurity
EnumServicesStatusA
CopySid

gdi32

StrokePath
GetFontData
RealizePalette
EnumMetaFile
GetObjectA
SetBkColor
GetPixel
RestoreDC
ExtFloodFill
DPtoLP
EndPath
SetBkMode
EnumFontFamiliesExW
EqualRgn
RemoveFontResourceA
FillPath
GetTextExtentPoint32A
SetPolyFillMode
StartDocW
Pie
SetRectRgn
OffsetRgn
SaveDC
CreateRoundRectRgn
ScaleWindowExtEx
AbortDoc
CreateICW
UpdateColors

version

VerQueryValueW
VerQueryValueA
VerInstallFileA
VerInstallFileW

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 541KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 224KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e12f7b497694788540342a51790cc900

Headers

File Characteristics

Imports

msvcrt

user32

advapi32

gdi32

version

Sections

.text Size: 72KB - Virtual size: 68KB

.rdata Size: 60KB - Virtual size: 57KB

.data Size: 8KB - Virtual size: 541KB

.rsrc Size: 224KB - Virtual size: 222KB

.text
Size: 72KB - Virtual size: 68KB

.rdata
Size: 60KB - Virtual size: 57KB

.data
Size: 8KB - Virtual size: 541KB

.rsrc
Size: 224KB - Virtual size: 222KB