eae9469c8b0970c4ea99f9e5fd759091105f322cb90fec73c5011315c2d94ddc

Sharing

Copy URL Twitter E-mail

General

Target

eae9469c8b0970c4ea99f9e5fd759091105f322cb90fec73c5011315c2d94ddc
Size

127KB
MD5

ee8bcc4aba4d5e700013b4882d964f93
SHA1

67d7ce4ce60ae809f0d503f267a68910ec8c3b41
SHA256

eae9469c8b0970c4ea99f9e5fd759091105f322cb90fec73c5011315c2d94ddc
SHA512

b9ab567c779e356b78037ffb9fd0ab647185d7975985e680e0fb43bb93d8f717308f20951e750439964f889b75354501dd2608b3ca1afd145fbfc326a721bf55
SSDEEP

3072:0aAMYSU5xd2sEgG78z/glVcZmoBHKFnb9gc7T44mP6lPl6Te+:0aJc258YA3Nqb99566lN66

Score

N/A

Malware Config

Signatures

Files

eae9469c8b0970c4ea99f9e5fd759091105f322cb90fec73c5011315c2d94ddc
.exe windows x86

b3b5a71b1837dbf18f873226ee91b06e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExW
UnregisterTraceGuids
RegCloseKey
RegCreateKeyExW
RegisterTraceGuidsW
RegOpenKeyExW
RegQueryValueExW
GetTraceEnableFlags
GetTraceLoggerHandle
GetTraceEnableLevel
RegCreateKeyW
TraceMessage

gdi32

SetBkColor
SetTextColor
CreateSolidBrush
CreateFontIndirectW
DeleteObject

powrprof

CallNtPowerInformation

msvcrt

_exit
??2@YAPAXI@Z
exit
_amsg_exit
memset
__p__commode
_wcsicmp
_XcptFilter
_vsnwprintf
_initterm
_wcmdln
__wgetmainargs
__setusermatherr
__p__fmode
?terminate@@YAXXZ
wcstoul
_cexit
??3@YAXPAX@Z
__set_app_type
_controlfp

user32

ShowWindow
SetDlgItemTextW
GetWindowTextW
DefWindowProcW
LoadIconW
FindWindowW
RegisterDeviceNotificationW
SetTimer
CreateWindowExW
LoadStringW
PostMessageW
RegisterClassExW
SetWindowLongW
GetSysColor
TranslateMessage
SendDlgItemMessageW
GetDlgCtrlID
SetWindowTextW
UnregisterClassW
GetDlgItem
SetForegroundWindow
SendMessageW
DestroyWindow
IsDlgButtonChecked
DispatchMessageW
DialogBoxParamW
GetWindowLongW
PostQuitMessage
SetFocus
FindWindowExW
EndDialog
GetSysColorBrush
SetActiveWindow
GetWindowTextLengthW
EnableWindow
CheckDlgButton
GetMessageW
UnregisterDeviceNotification
GetParent
KillTimer

crypt32

CryptEncodeObjectEx
CryptEnumOIDInfo
CryptEncodeObject

uxtheme

GetThemeColor
OpenThemeData
CloseThemeData
GetThemeFont

shell32

CommandLineToArgvW
ShellExecuteExW

ole32

CoCreateInstance
CoTaskMemFree
CoInitializeEx

kernel32

FreeResource
QueryPerformanceCounter
WideCharToMultiByte
GetCurrentProcess
GetCurrentThreadId
LocalAlloc
InterlockedIncrement
LeaveCriticalSection
GetStartupInfoW
GetProcessVersion
EnterCriticalSection
LockResource
DeleteCriticalSection
TerminateProcess
SetUnhandledExceptionFilter
WaitForSingleObject
ExitProcess
UnhandledExceptionFilter
CreateThread
GetModuleHandleA
LocalAlloc
GetSystemTimeAsFileTime
FindResourceW
GetTickCount
InterlockedExchange
LocalFree
GetLastError
InitializeCriticalSection
GetCurrentProcessId
LoadResource
InterlockedDecrement
CloseHandle
InterlockedCompareExchange
Sleep

wtsapi32

WTSRegisterSessionNotification
WTSUnRegisterSessionNotification

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsExW

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3b5a71b1837dbf18f873226ee91b06e

Headers

File Characteristics

Imports

advapi32

gdi32

powrprof

msvcrt

user32

crypt32

uxtheme

shell32

ole32

kernel32

wtsapi32

setupapi

Sections

.text Size: 84KB - Virtual size: 84KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 37KB - Virtual size: 36KB

.rsrc Size: 1024B - Virtual size: 100KB

.text
Size: 84KB - Virtual size: 84KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 37KB - Virtual size: 36KB

.rsrc
Size: 1024B - Virtual size: 100KB