8e6215591b20634974d19b09d51280102f5e21b861458e426bacd8c5acd34345

Sharing

Copy URL Twitter E-mail

General

Target

8e6215591b20634974d19b09d51280102f5e21b861458e426bacd8c5acd34345
Size

1.9MB
MD5

879265500e05e923fc191af0cc2555fb
SHA1

6f7391c7a2718cc6da2ceabf232285eac6eac099
SHA256

8e6215591b20634974d19b09d51280102f5e21b861458e426bacd8c5acd34345
SHA512

e6d15a02257d0bfa4f9550d5d0d8d59d266aaea80ec330e43386ed61bf25d0fe6cb55d565f960bf13d932d916afae847d9e17987bc1aa2931dfd247c069bf1f4
SSDEEP

24576:n26EK7sQVN2E34IhO5kcJpyom2AM1CzqC8cD:n26/sQVN2E3NhO5kcJpyomtzp8

Score

N/A

Malware Config

Signatures

Files

8e6215591b20634974d19b09d51280102f5e21b861458e426bacd8c5acd34345
.dll windows x64

72710acfd089c87881cf2015c8f83f53

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

WriteConsoleA
FlushFileBuffers
SetStdHandle
InitializeCriticalSectionAndSpinCount
HeapReAlloc
LoadLibraryA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringA
SetFilePointer
GetConsoleMode
GetConsoleCP
GetStartupInfoA
GetFileType
SetHandleCount
GetTimeZoneInformation
HeapDestroy
HeapCreate
GetConsoleOutputCP
CreateFileA
HeapSize
GetModuleFileNameA
WriteFile
LCMapStringW
FlsAlloc
FlsFree
FlsGetValue
DecodePointer
EncodePointer
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCommandLineA
FlsSetValue
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
ExitThread
RtlUnwindEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlPcToFileHeader
RaiseException
HeapSetInformation
WriteConsoleW
SetEndOfFile
CompareStringA
CompareStringW
CreateThread
QueryPerformanceCounter
VirtualQuery
lstrcmpiW
GetUserDefaultLangID
CreateFileW
GetFileSize
ReadFile
ResetEvent
TerminateThread
WideCharToMultiByte
OpenFileMappingW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
OpenMutexW
CreateMutexW
ReleaseMutex
LocalFree
OpenEventW
CreateEventW
WaitForMultipleObjects
SetEvent
GetVersionExW
GetSystemInfo
FormatMessageW
OutputDebugStringW
GetCurrentProcessId
GetStdHandle
SetConsoleTextAttribute
OutputDebugStringA
GetCurrentThread
WaitForSingleObject
MultiByteToWideChar
GetModuleFileNameW
GetLocalTime
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryW
FreeLibrary
SetLastError
GetTickCount
Sleep
LocalAlloc
GetModuleHandleW
GetProcAddress
GetCurrentProcess
CloseHandle
CompareFileTime
GetProcessHeap
HeapAlloc
HeapFree
IsBadReadPtr
TlsSetValue
TlsAlloc
lstrcpyW
lstrcatW
lstrlenW
GetComputerNameExW
GetLastError
TlsGetValue
FormatMessageA
ExitProcess
SetEnvironmentVariableA

user32

wsprintfW
CallNextHookEx
SetWindowLongPtrW
SetTimer
GetAsyncKeyState
GetKeyboardState
ToAscii
GetWindowLongPtrW
KillTimer
GetFocus
UnhookWindowsHookEx
SendMessageW
SetWindowsHookExW
GetForegroundWindow
FindWindowW
RegisterWindowMessageW
InflateRect
SetWindowPos
MapWindowPoints
GetClientRect
GetMonitorInfoW
MonitorFromWindow
GetDesktopWindow
GetWindowRect
GetWindow
GetParent
GetWindowLongW
EndDialog
CheckDlgButton
GetDlgCtrlID
GetClassNameW
PtInRect
PostMessageW
GetDC
ReleaseDC
MessageBoxW
LoadBitmapW
IsWindowEnabled
GetSystemMetrics
EnableWindow
GetWindowThreadProcessId
AttachThreadInput
SetFocus
SetForegroundWindow
SetActiveWindow
DefWindowProcW
IsWindow
SetPropW
GetPropW
CallWindowProcW
DrawTextW
SetWindowRgn
SetRect
FillRect
GetSysColor
DialogBoxParamW
LoadIconW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
InvalidateRect
UpdateWindow
SetWindowLongW
MoveWindow
IsWindowVisible
ShowWindow
IsDlgButtonChecked
GetDlgItem

gdi32

SelectObject
GetTextExtentPoint32W
MoveToEx
SetBkColor
ExtTextOutW
CreateCompatibleBitmap
DeleteDC
DeleteObject
BitBlt
CreateSolidBrush
CreateEllipticRgn
SetTextColor
SetBkMode
CreateFontW
SelectClipRgn
Arc
CreatePen
LineTo
TextOutW
Ellipse
CreateRectRgnIndirect
GetStockObject
CreateCompatibleDC

advapi32

SetSecurityDescriptorDacl
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
OpenThreadToken
SetThreadToken
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenSCManagerW
OpenServiceW
QueryServiceStatusEx
QueryServiceConfigW
ChangeServiceConfigW
StartServiceW
CloseServiceHandle
OpenProcessToken
GetTokenInformation
InitializeSecurityDescriptor

shell32

ShellExecuteExW

ole32

CoCreateGuid

crypt32

CertGetNameStringW
CertFindExtension
CryptDecodeObject
CertCreateCertificateContext
CertGetEnhancedKeyUsage
CertFreeCertificateContext
CertSetCertificateContextProperty
CertAddEncodedCertificateToStore
CertOpenStore
CertGetNameStringA
CryptVerifyCertificateSignature
CertCloseStore

wtsapi32

WTSEnumerateSessionsW
WTSQuerySessionInformationW
WTSFreeMemory

winscard

SCardTransmit
SCardBeginTransaction
SCardDisconnect
SCardReleaseContext
SCardIsValidContext
SCardConnectW
SCardReconnect
g_rgSCardT1Pci
g_rgSCardT0Pci
SCardEndTransaction
SCardListReadersA
SCardGetStatusChangeW
SCardStatusW
SCardEstablishContext

Exports

Exports

CPAcquireContext
CPCreateHash
CPDecrypt
CPDeriveKey
CPDestroyHash
CPDestroyKey
CPEncrypt
CPExportKey
CPGenKey
CPGenRandom
CPGetHashParam
CPGetKeyParam
CPGetProvParam
CPGetUserKey
CPHashData
CPHashSessionKey
CPImportKey
CPReleaseContext
CPSetHashParam
CPSetKeyParam
CPSetProvParam
CPSignHash
CPVerifySignature
C_CancelFunction
C_CloseAllSessions
C_CloseSession
C_CopyObject
C_CreateObject
C_Decrypt
C_DecryptDigestUpdate
C_DecryptFinal
C_DecryptInit
C_DecryptUpdate
C_DecryptVerifyUpdate
C_DeriveKey
C_DestroyObject
C_Digest
C_DigestEncryptUpdate
C_DigestFinal
C_DigestInit
C_DigestKey
C_DigestUpdate
C_Encrypt
C_EncryptFinal
C_EncryptInit
C_EncryptUpdate
C_Finalize
C_FindObjects
C_FindObjectsFinal
C_FindObjectsInit
C_GenerateKey
C_GenerateKeyPair
C_GenerateRandom
C_GetAttributeValue
C_GetFunctionList
C_GetFunctionStatus
C_GetInfo
C_GetMechanismInfo
C_GetMechanismList
C_GetObjectSize
C_GetOperationState
C_GetSessionInfo
C_GetSlotInfo
C_GetSlotList
C_GetTokenInfo
C_InitPIN
C_InitToken
C_Initialize
C_Login
C_Logout
C_OpenSession
C_SeedRandom
C_SetAttributeValue
C_SetOperationState
C_SetPIN
C_Sign
C_SignEncryptUpdate
C_SignFinal
C_SignInit
C_SignRecover
C_SignRecoverInit
C_SignUpdate
C_UnwrapKey
C_Verify
C_VerifyFinal
C_VerifyInit
C_VerifyRecover
C_VerifyRecoverInit
C_VerifyUpdate
C_WaitForSlotEvent
C_WrapKey
CardAcquireContext
E_GetAuxFunctionList
GetKeyStorageInterface
eb_RegKspProvider
eb_RunNoElevated
eb_StartScardSvc
eb_UnRegKspProvider

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 255KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ve_share
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 360KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

72710acfd089c87881cf2015c8f83f53

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

crypt32

wtsapi32

winscard

Exports

Exports

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 255KB - Virtual size: 254KB

.data Size: 33KB - Virtual size: 63KB

.pdata Size: 39KB - Virtual size: 39KB

ve_share Size: 2KB - Virtual size: 1KB

.rsrc Size: 360KB - Virtual size: 360KB

.reloc Size: 15KB - Virtual size: 14KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 255KB - Virtual size: 254KB

.data
Size: 33KB - Virtual size: 63KB

.pdata
Size: 39KB - Virtual size: 39KB

ve_share
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 360KB - Virtual size: 360KB

.reloc
Size: 15KB - Virtual size: 14KB