eae68c2882889c528b92b2a69828215693409c20f295cfd0e187e4aa1c969d05

Sharing

Copy URL Twitter E-mail

General

Target

eae68c2882889c528b92b2a69828215693409c20f295cfd0e187e4aa1c969d05
Size

74KB
MD5

06779ee796e271019ea04248e58b434c
SHA1

7aed76b48a8cd6acab2a877c305d220f8bbc5553
SHA256

eae68c2882889c528b92b2a69828215693409c20f295cfd0e187e4aa1c969d05
SHA512

df5f3f2899ce0acca278e7404e5a6b6d546bcbcc5c37974018eb332c83064c83d2d6b9b51dd1879cea99ad4bc1c31e14424f5d455c50efb2d4b07e28ef82994b
SSDEEP

1536:4akddMwR6sR1YD5UNntBULdUCW9m5YOVjOL9yKzh4o:9GMwR6sR18WNtEqD9m5Id4

Score

N/A

Malware Config

Signatures

Files

eae68c2882889c528b92b2a69828215693409c20f295cfd0e187e4aa1c969d05
.exe windows x86

f4051b8ba4d8bdbbbe99f0dde3368463

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoRevertToSelf
ReleaseStgMedium
OleQueryCreateFromData
CreateBindCtx
CoInitialize
StgOpenStorage
StgCreateDocfile
CoRevokeClassObject
StgIsStorageFile
CreateStreamOnHGlobal
CreateOleAdviseHolder
CoGetObjectContext
CoInitializeSecurity
CoSetProxyBlanket
CoReleaseMarshalData

advapi32

IsValidAcl
InitializeAcl
RegOpenKeyA
GetAclInformation
RegEnumKeyW
GetUserNameW
RegDeleteValueW
RegOpenKeyExA
RegOpenKeyW
CloseServiceHandle
GetSecurityDescriptorLength
LookupAccountNameW
LookupAccountSidW
RegQueryValueExA
RegEnumKeyExA
GetSecurityDescriptorControl
EqualSid
RegQueryInfoKeyA
OpenThreadToken
RegSetValueExA
LsaQueryInformationPolicy

shell32

ShellExecuteExW
SHBrowseForFolderW
SHGetFolderPathW
SHFileOperationW
SHBrowseForFolderA

user32

GetCursorPos
OffsetRect
EnableMenuItem
EqualRect
GetSysColor
DestroyWindow
EndPaint
LoadStringA
GetSystemMetrics
GetSystemMenu
GetCapture
GetDC
FindWindowA
RegisterWindowMessageW
PeekMessageW
GetClientRect
CharLowerW
CallWindowProcW
RegisterClipboardFormatW
GetClassNameA
GetWindowDC
RegisterClassW
GetPropA
SetDlgItemTextW
IsChild
GetAncestor
DestroyIcon
GetActiveWindow

kernel32

FindFirstFileA
IsBadWritePtr
InterlockedExchange
VirtualFree
WriteConsoleW
GetSystemDirectoryA
TerminateProcess
FindFirstFileW
GetExitCodeProcess
lstrcmpiA
GetFileSize
GetWindowsDirectoryW
GetProcessHeap
CreateFileMappingA
GetConsoleOutputCP
VirtualAlloc
CreateProcessW
SizeofResource
MultiByteToWideChar
lstrcatA
ExitProcess
GlobalAlloc
VirtualProtect
UnhandledExceptionFilter
OpenProcess
GetStringTypeA
SystemTimeToFileTime

rpcrt4

RpcStringFreeW
NdrServerCall2
RpcImpersonateClient
CStdStubBuffer_IsIIDSupported
RpcStringFreeA
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_CountRefs
IUnknown_AddRef_Proxy
NdrStubCall2
UuidCreate
RpcBindingSetAuthInfoExW
RpcStringBindingParseW
RpcBindingFromStringBindingW
UuidToStringA
UuidToStringW
RpcEpResolveBinding

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 15KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 42KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f4051b8ba4d8bdbbbe99f0dde3368463

Headers

File Characteristics

Imports

ole32

advapi32

shell32

user32

kernel32

rpcrt4

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 7KB - Virtual size: 7KB

.tls Size: 15KB - Virtual size: 26KB

.idata Size: 42KB - Virtual size: 91KB

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 7KB - Virtual size: 7KB

.tls
Size: 15KB - Virtual size: 26KB

.idata
Size: 42KB - Virtual size: 91KB