9d67b83b6c3c1e4429008efcdebb313182e2f6a2322eca0f98812a02049f774c

Sharing

Copy URL Twitter E-mail

General

Target

9d67b83b6c3c1e4429008efcdebb313182e2f6a2322eca0f98812a02049f774c
Size

82KB
MD5

61f85c19f0065f770bab007cadbd7a63
SHA1

4264bc2ee6ebcac37b9ee29562247d945eda2867
SHA256

9d67b83b6c3c1e4429008efcdebb313182e2f6a2322eca0f98812a02049f774c
SHA512

103cf822946f45c9dc6c2fa87c325e45af150fc1e0b0dd9b199802ed9a209efb29a6612f38077f0cab875eee09d3ef89918100b6338634d63ebddf305797b6b0
SSDEEP

1536:r72zVyPktcmAj/aCIRAuzKq+nntl1uZO9/BYOJ75QOM4dWw9TC0/xBSKs:r7iVVtcmAj/aCIRAuzStlQmr7GOMaz9W

Score

N/A

Malware Config

Signatures

Files

9d67b83b6c3c1e4429008efcdebb313182e2f6a2322eca0f98812a02049f774c
.exe windows x86

bfc683bc1c70a2bb146e550f90627c92

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Beep
CloseHandle
CreateFileMappingA
CreateFileW
CreateJobObjectA
CreateMutexW
CreateTimerQueue
DeleteTimerQueueTimer
EnterCriticalSection
EnumCalendarInfoExW
ExitProcess
FindNextVolumeA
FindNextVolumeMountPointW
GetACP
GetBinaryTypeA
GetCommandLineA
GetDefaultCommConfigW
GetExitCodeProcess
GetModuleHandleA
GetOEMCP
GetPrivateProfileStringW
GetStartupInfoA
GetThreadPriority
GetThreadPriorityBoost
GetThreadTimes
GetTimeFormatW
GetVersionExA
Heap32Next
HeapAlloc
HeapCreate
HeapValidate
IsBadReadPtr
IsBadStringPtrA
LocalSize
MapUserPhysicalPages
MapViewOfFile
OpenFile
OpenSemaphoreA
ResetWriteWatch
SetFileAttributesA
SetFileAttributesW
SetLastError
SetStdHandle
WaitForMultipleObjects
WritePrivateProfileStructA
_llseek
_lopen
lstrcpyA

user32

SetWindowPlacement
UnionRect
SetDlgItemTextA
TrackPopupMenu
SetWindowLongA
ReleaseCapture
RegisterClassA
PostQuitMessage
MsgWaitForMultipleObjects
LoadIconA
InvalidateRgn
IntersectRect
GetWindowRect
GetWindowDC
GetUserObjectSecurity
GetParent
GetMenuItemCount
GetMenu
GetFocus
GetDlgItemTextA
GetDlgItem
EmptyClipboard
DrawEdge
DestroyWindow
DeferWindowPos
DefFrameProcA
DefDlgProcA
CreateWindowExA
ClientToScreen
CheckMenuItem
SetMenuItemInfoA

msi

MsiOpenPackageW
MsiInstallMissingFileW
MsiOpenProductA
MsiPreviewDialogW
MsiProvideAssemblyA
MsiViewGetErrorW
MsiViewExecute
MsiViewClose
MsiVerifyPackageA
MsiInstallMissingFileA
MsiInstallMissingComponentW
MsiGetFeatureUsageW
MsiEvaluateConditionW
MsiEnumPatchesA
MsiEnumComponentQualifiersA
MsiEnableUIPreview
MsiEnableLogA
MsiProcessAdvertiseScriptA
MsiDoActionW
MsiDeleteUserDataW
MsiDatabaseOpenViewA
MsiDatabaseIsTablePersistentW
MsiDatabaseExportW
MsiDatabaseExportA
MsiCreateTransformSummaryInfoW
MsiCreateAndVerifyInstallerDirectory
MsiCollectUserInfoW
MsiAdvertiseProductA
Migrate10CachedPackagesA
MsiSetComponentStateW
MsiSetComponentStateA
MsiReinstallProductW
MsiRecordSetStreamA
MsiRecordSetInteger
MsiQueryProductStateA

oleacc

WindowFromAccessibleObject
AccessibleChildren

oledlg

OleUIAddVerbMenuA
OleUIBusyA
OleUICanConvertOrActivateAs
OleUIChangeIconA

dbghelp

SymFunctionTableAccess64
SymFromAddr
SymGetSymNext64
SymGetTypeFromName
SymGetSymFromName64
SymFindFileInPath
FindFileInSearchPath

comctl32

FlatSB_SetScrollProp
InitCommonControls
ImageList_Write
ImageList_SetOverlayImage
ImageList_SetFlags
ImageList_SetFilter
ImageList_LoadImageW
ImageList_LoadImageA
ImageList_GetImageCount
ImageList_GetIcon
ImageList_GetBkColor
ImageList_Duplicate
ImageList_DrawIndirect
ImageList_DragLeave
ImageList_BeginDrag
ImageList_AddIcon
FlatSB_ShowScrollBar
FlatSB_SetScrollInfo
FlatSB_GetScrollProp
FlatSB_GetScrollPos
DrawStatusTextA
DrawInsert
DestroyPropertySheetPage
CreateStatusWindowA
CreateMappedBitmap
InitMUILanguage
InitializeFlatSB
MenuHelp
PropertySheetW
InitCommonControlsEx

comdlg32

GetOpenFileNameW
dwOKSubclass
dwLBSubclass
WantArrows
GetSaveFileNameW
ChooseFontW
GetSaveFileNameA
CommDlgExtendedError

security

QuerySecurityPackageInfoW
FreeContextBuffer
DeleteSecurityPackageW
DeleteSecurityPackageA
DeleteSecurityContext
AcquireCredentialsHandleW
AddSecurityPackageA
CompleteAuthToken

advapi32

SetSecurityDescriptorDacl
SetNamedSecurityInfoA
ReportEventA
RegisterTraceGuidsW
RegFlushKey
OpenTraceA
OpenServiceA
OpenEventLogW
LsaRemovePrivilegesFromAccount
LsaAddPrivilegesToAccount
LookupSecurityDescriptorPartsW
ImpersonateNamedPipeClient
GetAuditedPermissionsFromAclA
FindFirstFreeAce
EnumServicesStatusExW
ElfRegisterEventSourceW
ElfChangeNotify
DestroyPrivateObjectSecurity
CryptDuplicateKey
CreateServiceA
CreateProcessAsUserA
ConvertToAutoInheritPrivateObjectSecurity
ClearEventLogW
BuildImpersonateExplicitAccessWithNameW
AddAccessAllowedObjectAce

Sections

.text
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bfc683bc1c70a2bb146e550f90627c92

Headers

File Characteristics

Imports

kernel32

user32

msi

oleacc

oledlg

dbghelp

comctl32

comdlg32

security

advapi32

Sections

.text Size: 50KB - Virtual size: 52KB

.data Size: 28KB - Virtual size: 32KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 1KB - Virtual size: 4KB

.text
Size: 50KB - Virtual size: 52KB

.data
Size: 28KB - Virtual size: 32KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 1KB - Virtual size: 4KB