d98ae8303f28e8dae779986c9b5d2be6d773074b179706ea9126be219a11ad31

Sharing

Copy URL Twitter E-mail

General

Target

d98ae8303f28e8dae779986c9b5d2be6d773074b179706ea9126be219a11ad31
Size

74KB
MD5

03f6aaf32e19903d1b47ec8981eb0d3f
SHA1

e81afad5e4ac9b94f4180d8df6342ac31fec2343
SHA256

d98ae8303f28e8dae779986c9b5d2be6d773074b179706ea9126be219a11ad31
SHA512

a9bc30f5f64a356e34064cdfdeb0f14b823066fbdca860ba2863928cb5a1dd2067fe8ea4cfff46b6932485e6011e8fe217c7ed42f37dfa5cf36e1af05d5df4d5
SSDEEP

1536:4akddMwResR1YD5UNntBULdUCW9m5YOVjOL9yKzh4o:9GMwResR18WNtEqD9m5Id4

Score

N/A

Malware Config

Signatures

Files

d98ae8303f28e8dae779986c9b5d2be6d773074b179706ea9126be219a11ad31
.exe windows x86

f4051b8ba4d8bdbbbe99f0dde3368463

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoRevertToSelf
ReleaseStgMedium
OleQueryCreateFromData
CreateBindCtx
CoInitialize
StgOpenStorage
StgCreateDocfile
CoRevokeClassObject
StgIsStorageFile
CreateStreamOnHGlobal
CreateOleAdviseHolder
CoGetObjectContext
CoInitializeSecurity
CoSetProxyBlanket
CoReleaseMarshalData

advapi32

IsValidAcl
InitializeAcl
RegOpenKeyA
GetAclInformation
RegEnumKeyW
GetUserNameW
RegDeleteValueW
RegOpenKeyExA
RegOpenKeyW
CloseServiceHandle
GetSecurityDescriptorLength
LookupAccountNameW
LookupAccountSidW
RegQueryValueExA
RegEnumKeyExA
GetSecurityDescriptorControl
EqualSid
RegQueryInfoKeyA
OpenThreadToken
RegSetValueExA
LsaQueryInformationPolicy

shell32

ShellExecuteExW
SHBrowseForFolderW
SHGetFolderPathW
SHFileOperationW
SHBrowseForFolderA

user32

GetCursorPos
OffsetRect
EnableMenuItem
EqualRect
GetSysColor
DestroyWindow
EndPaint
LoadStringA
GetSystemMetrics
GetSystemMenu
GetCapture
GetDC
FindWindowA
RegisterWindowMessageW
PeekMessageW
GetClientRect
CharLowerW
CallWindowProcW
RegisterClipboardFormatW
GetClassNameA
GetWindowDC
RegisterClassW
GetPropA
SetDlgItemTextW
IsChild
GetAncestor
DestroyIcon
GetActiveWindow

kernel32

FindFirstFileA
IsBadWritePtr
InterlockedExchange
VirtualFree
WriteConsoleW
GetSystemDirectoryA
TerminateProcess
FindFirstFileW
GetExitCodeProcess
lstrcmpiA
GetFileSize
GetWindowsDirectoryW
GetProcessHeap
CreateFileMappingA
GetConsoleOutputCP
VirtualAlloc
CreateProcessW
SizeofResource
MultiByteToWideChar
lstrcatA
ExitProcess
GlobalAlloc
VirtualProtect
UnhandledExceptionFilter
OpenProcess
GetStringTypeA
SystemTimeToFileTime

rpcrt4

RpcStringFreeW
NdrServerCall2
RpcImpersonateClient
CStdStubBuffer_IsIIDSupported
RpcStringFreeA
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_CountRefs
IUnknown_AddRef_Proxy
NdrStubCall2
UuidCreate
RpcBindingSetAuthInfoExW
RpcStringBindingParseW
RpcBindingFromStringBindingW
UuidToStringA
UuidToStringW
RpcEpResolveBinding

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 15KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 42KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f4051b8ba4d8bdbbbe99f0dde3368463

Headers

File Characteristics

Imports

ole32

advapi32

shell32

user32

kernel32

rpcrt4

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 7KB - Virtual size: 7KB

.tls Size: 15KB - Virtual size: 26KB

.idata Size: 42KB - Virtual size: 91KB

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 7KB - Virtual size: 7KB

.tls
Size: 15KB - Virtual size: 26KB

.idata
Size: 42KB - Virtual size: 91KB