cb500066dce81a15d966dfd474c7d6202d79bc1972e74c1b6c5267d2bacd77cc

Sharing

Copy URL Twitter E-mail

General

Target

cb500066dce81a15d966dfd474c7d6202d79bc1972e74c1b6c5267d2bacd77cc
Size

109KB
MD5

c0192e538210c51baf6769cbed61ab6e
SHA1

4fc2b1324f19969e76957cb1ee07106b0652e3ac
SHA256

cb500066dce81a15d966dfd474c7d6202d79bc1972e74c1b6c5267d2bacd77cc
SHA512

199c09eb8ce11013fe2495778d384a45bb1b6356576f131f681f46df6515e27bc82cb5700d121c77a0b2665a20b1bea3133dbc3b418921f99c916d2dc63c695c
SSDEEP

3072:Tyw1f/hiLXQVgFvRI3e88hCR028czdgkTJkjIfYHbG/:3XhikCMe88MR0MdejkYHbG

Score

N/A

Malware Config

Signatures

Files

cb500066dce81a15d966dfd474c7d6202d79bc1972e74c1b6c5267d2bacd77cc
.exe windows x86

ce69a0baf2303e4f9ef93c6fcaef88eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExW
GetTraceEnableLevel
RegCreateKeyExW
RegCloseKey
RegisterTraceGuidsW
UnregisterTraceGuids
RegCreateKeyW
RegOpenKeyExW
GetTraceEnableFlags
GetTraceLoggerHandle
RegSetValueExW
TraceMessage

ole32

CoCreateInstance
CoTaskMemFree
CoInitializeEx

powrprof

CallNtPowerInformation

user32

TranslateMessage
GetWindowTextLengthW
SetActiveWindow
PostQuitMessage
CreateWindowExW
DispatchMessageW
CheckDlgButton
GetWindowTextW
GetDlgItem
SetWindowTextW
SetTimer
GetDlgCtrlID
DefWindowProcW
LoadStringW
RegisterClassExW
EnableWindow
SetForegroundWindow
EndDialog
ShowWindow
SendMessageW
RegisterDeviceNotificationW
SetFocus
FindWindowW
PostMessageW
IsDlgButtonChecked
LoadIconW
SendDlgItemMessageW
GetParent
GetSysColorBrush
DestroyWindow
UnregisterDeviceNotification
DialogBoxParamW
UnregisterClassW
SetDlgItemTextW
SetWindowLongW
GetWindowLongW
FindWindowExW
GetSysColor
GetMessageW
KillTimer

gdi32

SetTextColor
CreateSolidBrush
CreateFontIndirectW
SetBkColor
DeleteObject

setupapi

SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsExW

wtsapi32

WTSRegisterSessionNotification
WTSUnRegisterSessionNotification

kernel32

WideCharToMultiByte
LocalAlloc
DeleteCriticalSection
GetStartupInfoW
GlobalAlloc
InitializeCriticalSection
EnterCriticalSection
GetProcessVersion
SetUnhandledExceptionFilter
CreateThread
InterlockedExchange
CloseHandle
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentProcess
LocalFree
GetTickCount
ExitProcess
GetSystemTimeAsFileTime
InterlockedIncrement
LoadResource
GetCurrentProcessId
InterlockedCompareExchange
InterlockedDecrement
UnhandledExceptionFilter
LeaveCriticalSection
FindResourceW
WaitForSingleObject
LockResource
FreeResource
GetModuleHandleA
GetLastError
TerminateProcess
Sleep

crypt32

CryptEncodeObjectEx
CertEnumSystemStoreLocation
CryptEncodeObject

uxtheme

GetThemeColor
OpenThemeData
CloseThemeData
GetThemeFont

msvcrt

_cexit
_amsg_exit
__set_app_type
_exit
??2@YAPAXI@Z
wcstoul
_initterm
__setusermatherr
__p__commode
_vsnwprintf
__p__fmode
exit
__wgetmainargs
_wcmdln
??3@YAXPAX@Z
memset
?terminate@@YAXXZ
_XcptFilter
_wcsicmp
_controlfp

shell32

CommandLineToArgvW
ShellExecuteExW

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ce69a0baf2303e4f9ef93c6fcaef88eb

Headers

File Characteristics

Imports

advapi32

ole32

powrprof

user32

gdi32

setupapi

wtsapi32

kernel32

crypt32

uxtheme

msvcrt

shell32

Sections

.text Size: 57KB - Virtual size: 56KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 46KB - Virtual size: 46KB

.rsrc Size: 1024B - Virtual size: 360KB

.text
Size: 57KB - Virtual size: 56KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 46KB - Virtual size: 46KB

.rsrc
Size: 1024B - Virtual size: 360KB