bd0d0a8519b10dde2705934823b4b045d487c93fe3dce7790f6ac8abbeab3643

Sharing

Copy URL Twitter E-mail

General

Target

bd0d0a8519b10dde2705934823b4b045d487c93fe3dce7790f6ac8abbeab3643
Size

72KB
MD5

5c41ceb9a8ed614e8f66edb5ff2d273f
SHA1

9e6529c367dbb43ced716f9a070d7efaa1e00757
SHA256

bd0d0a8519b10dde2705934823b4b045d487c93fe3dce7790f6ac8abbeab3643
SHA512

09c9e32cd43540e645f0b63499f0f9e5839eb53ae293ea0e067b30d89c0866090b5997b4976e28c6e6e9d0edf37cd0070e70ff65ed0d65bfe8d64aa66f845a64
SSDEEP

1536:WzefL9ihxoI+rtyWASIC4qrFfpFF60a8U3/HN1t8rn7IPCFiR3fsk6+/vmjof:WzdhxoI+rty+IjqrLa8UvNzLPjfsXo

Score

N/A

Malware Config

Signatures

Files

bd0d0a8519b10dde2705934823b4b045d487c93fe3dce7790f6ac8abbeab3643
.exe windows x86

c778bcfb56c72d7b39ac2e740dea3018

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

PropVariantClear
StgCreateDocfile
CoGetObjectContext
OleInitialize
StringFromGUID2
CoRevertToSelf
OleLoadFromStream
CoCreateGuid
OleTranslateAccelerator
StgCreateDocfileOnILockBytes
ReleaseStgMedium
StgOpenStorage
CoUninitialize
CoMarshalInterThreadInterfaceInStream
OleUninitialize
CoGetInterfaceAndReleaseStream
CoUnmarshalInterface
CoReleaseMarshalData
CLSIDFromString
GetHGlobalFromStream
GetRunningObjectTable
CoTaskMemFree

version

GetFileVersionInfoA
GetFileVersionInfoW
GetFileVersionInfoSizeA

user32

EnumChildWindows
SendDlgItemMessageA
PeekMessageA
SystemParametersInfoW
GetProcessWindowStation
ScreenToClient
GetPropA
GetSysColorBrush
SetRect
DestroyWindow
CharUpperW
IntersectRect
WinHelpW
IsMenu
wsprintfA
LoadCursorA
GetActiveWindow
GetFocus
MoveWindow
CreateWindowExA
GetWindowLongW
GetCursorPos
GetSysColor
SetMenu
PostQuitMessage
GetWindowPlacement
GetClassNameW
BeginPaint
ChangeMenuW
GetDlgItem
GetDC
GetCapture
EqualRect
SetForegroundWindow
DrawFocusRect
SetDlgItemTextW
EnableWindow

comctl32

InitCommonControls
ImageList_Create
ImageList_ReplaceIcon
CreatePropertySheetPageW
ImageList_Draw

advapi32

RegQueryValueW
ConvertStringSidToSidW
RegEnumKeyW
SetEntriesInAclW
RegQueryValueExA
OpenSCManagerA
GetSecurityDescriptorDacl
OpenServiceW
RegEnumValueW
InitializeAcl
EqualSid
RegCreateKeyExW
IsValidSecurityDescriptor
GetTraceEnableLevel
GetLengthSid
StartServiceW
RegisterTraceGuidsW
InitializeSecurityDescriptor
UnregisterTraceGuids
OpenServiceA
CheckTokenMembership
InitializeSid
RegFlushKey
RegQueryValueExW
RegDeleteValueW
SetSecurityDescriptorDacl
RegSetValueExW
RegOpenKeyA

msvcrt

_stricmp
iswalpha
_unlock
_isatty
wcsncmp
toupper
_itow
__CxxFrameHandler
isdigit
_wcslwr
time
_wsplitpath
bsearch
_except_handler3
__set_app_type
??3@YAXPAX@Z
strncpy
iswspace
??1type_info@@UAE@XZ
wcsncpy

kernel32

DeleteCriticalSection
lstrlenW
GetFileAttributesA
TlsGetValue
HeapDestroy
EnterCriticalSection
MapViewOfFile
lstrcpynA
InitializeCriticalSectionAndSpinCount
ResetEvent
GetFileSize
GetLocaleInfoW
GetCurrentProcess
CompareStringA
ExitProcess
InterlockedCompareExchange
FileTimeToLocalFileTime
GlobalFree
VirtualAlloc
lstrcatA
GetModuleFileNameW
CreateEventA
GetLastError
OpenProcess
SetFileAttributesW

rpcrt4

RpcRaiseException
RpcStringBindingComposeW
RpcRevertToSelf
NdrDllUnregisterProxy
NdrOleAllocate
RpcStringFreeA
NdrStubForwardingFunction
RpcStringBindingParseW
RpcServerUseProtseqEpW
CStdStubBuffer_AddRef
RpcBindingSetAuthInfoW
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
RpcBindingFree
CStdStubBuffer_DebugServerQueryInterface
RpcBindingVectorFree
NdrDllCanUnloadNow
CStdStubBuffer_IsIIDSupported

Sections

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 14KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 39KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c778bcfb56c72d7b39ac2e740dea3018

Headers

File Characteristics

Imports

ole32

version

user32

comctl32

advapi32

msvcrt

kernel32

rpcrt4

Sections

.rdata Size: 6KB - Virtual size: 5KB

.text Size: 10KB - Virtual size: 9KB

DATA Size: 1KB - Virtual size: 1KB

BSS Size: 14KB - Virtual size: 28KB

.idata Size: 39KB - Virtual size: 84KB

.rdata
Size: 6KB - Virtual size: 5KB

.text
Size: 10KB - Virtual size: 9KB

DATA
Size: 1KB - Virtual size: 1KB

BSS
Size: 14KB - Virtual size: 28KB

.idata
Size: 39KB - Virtual size: 84KB