c18572a7ef6db03e05ac92302b9e4f25035273fcb76e20c5b1de7b46c07ed7cf

Sharing

Copy URL Twitter E-mail

General

Target

c18572a7ef6db03e05ac92302b9e4f25035273fcb76e20c5b1de7b46c07ed7cf
Size

195KB
MD5

76d687d38f69f21acd275276758f92a7
SHA1

970c5ac144ce55a1c0fef3797aa28917234281e5
SHA256

c18572a7ef6db03e05ac92302b9e4f25035273fcb76e20c5b1de7b46c07ed7cf
SHA512

bc509d7707a8a6fbdc5ae06d624f31a0759530c6e5567adf47216850eff81b9f9cdf34d8541b8fcb770e35d8530078774e28d0c9a90f44f24cf2da49da8f9088
SSDEEP

6144:h9dQn+yget4lfrsojhhA8sosNAdTrfOi6+CSNwyZ:h96+wgsShrF6+CKX

Score

N/A

Malware Config

Signatures

Files

c18572a7ef6db03e05ac92302b9e4f25035273fcb76e20c5b1de7b46c07ed7cf
.exe windows x86

b7eb5c37b6f9c3b40871289c8e372b9a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyboardLayout
GetGUIThreadInfo
GetSysColorBrush
GetOpenClipboardWindow
ShowCursor
MonitorFromPoint
LoadAcceleratorsA
CloseDesktop
LoadBitmapA
ToUnicode
InSendMessage
BroadcastSystemMessageW
SetLastErrorEx
ReplyMessage
CopyImage
CascadeWindows
SendDlgItemMessageA
DragObject
AppendMenuW
PaintDesktop
TrackMouseEvent
ChangeDisplaySettingsExA
RegisterClassW
DrawIcon
DragDetect
SendNotifyMessageA
SetWindowsHookExA
EnumDisplayDevicesW
InSendMessageEx
OpenWindowStationA
InvertRect
SendMessageTimeoutW
ScrollWindow
CharUpperBuffW
GetTitleBarInfo
SetWindowWord
GetDlgItemTextA
ModifyMenuW
SetTimer
GetMenu
AnyPopup
DestroyAcceleratorTable
HiliteMenuItem
MessageBoxIndirectW
EnumDisplayDevicesA
CreateDesktopW
SetProcessDefaultLayout
GetMenuCheckMarkDimensions
LoadMenuIndirectW
ShowScrollBar
FlashWindowEx
RemovePropW
SetWindowsHookW
GetWindowTextLengthW
SetCapture
GetPropW
SetWindowLongW
UnregisterDeviceNotification
FindWindowW
SetUserObjectSecurity
LoadKeyboardLayoutW
IsCharUpperA
DrawMenuBar
CopyAcceleratorTableW
DrawFocusRect
GetClipCursor
ModifyMenuA
GetMessageExtraInfo
GetWindow
TabbedTextOutA
SendInput
GetScrollInfo
SetMessageExtraInfo
GetSystemMenu
OpenIcon
InsertMenuA
SetSysColors
SetClassLongW
DrawStateA
GetKeyboardState
DefWindowProcA
EnumDisplaySettingsW
GetClipboardData
SubtractRect
TileChildWindows
EnumThreadWindows
CharLowerBuffW
EnumDisplaySettingsA
EnumPropsExA
ExitWindowsEx

kernel32

WriteFileGather
CreateTapePartition
OpenSemaphoreA
IsValidLocale
SetConsoleCtrlHandler
GetCommandLineW
SetCommBreak
VirtualProtect
GetMailslotInfo
GlobalAlloc
CompareStringW
GetNumberOfConsoleMouseButtons
BuildCommDCBAndTimeoutsA
GetWriteWatch
TransmitCommChar
UnlockFileEx
HeapCompact
SwitchToFiber
FindFirstFileW
SystemTimeToFileTime
VirtualAlloc
CreateMailslotW
LocalFlags
IsBadStringPtrA
Module32Next
ResumeThread
EnumDateFormatsExW
GetWindowsDirectoryW
UpdateResourceA
WriteProfileStringW
SetLocalTime
GetProcessShutdownParameters
SetPriorityClass
CreateMutexA
CancelDeviceWakeupRequest
GetVolumeInformationA
WriteFileEx
FillConsoleOutputCharacterW
CopyFileExW
CreateWaitableTimerW
FindResourceExW
WriteConsoleOutputAttribute
BuildCommDCBW
GetCompressedFileSizeW
ConvertThreadToFiber
OutputDebugStringW
GetProfileStringW
GetFullPathNameA
GetCurrentThreadId
PostQueuedCompletionStatus
GetCommState
DeleteFiber
GetLogicalDriveStringsW
SetTimeZoneInformation
GetOEMCP
GetSystemInfo
GetProcessWorkingSetSize
lstrcpynA
GetCommMask
ReadConsoleA
GetBinaryTypeA
ResetEvent
FormatMessageW
lstrcatW
LockResource
CopyFileExA
GlobalHandle
FatalAppExitW
WriteConsoleOutputCharacterA
WinExec
LocalFileTimeToFileTime
CreateFileW
GetACP
EnumCalendarInfoW
GetHandleInformation
FillConsoleOutputAttribute
GetSystemDefaultLCID
FileTimeToDosDateTime
SetLocaleInfoW
RemoveDirectoryW
GetConsoleCursorInfo
LoadResource
LockFile
CancelIo

shlwapi

SHOpenRegStreamW
StrToIntA
PathIsRelativeW
PathFindNextComponentA
StrPBrkA
PathRemoveExtensionW
PathCombineA
PathUndecorateW
PathMatchSpecA
SHGetInverseCMAP
PathMakeSystemFolderW
UrlGetPartW
StrIsIntlEqualA
StrTrimA
SHRegOpenUSKeyA
PathAppendA
PathUnquoteSpacesW
SHDeleteKeyW
StrChrA
StrCpyW
PathBuildRootA
wvnsprintfW
SHRegWriteUSValueW
UrlCanonicalizeW
PathIsSystemFolderW
UrlCombineW
PathRemoveBackslashA
PathCanonicalizeA
PathCreateFromUrlW
PathQuoteSpacesW
PathSkipRootA
UrlCanonicalizeA
PathFindFileNameW
ColorHLSToRGB
SHEnumKeyExW
PathFindFileNameA
StrFormatByteSize64A
StrIsIntlEqualW
PathIsUNCServerShareW
SHSetThreadRef
wnsprintfW
StrCSpnIW
PathGetCharTypeA
StrPBrkW
StrCatBuffA
SHDeleteEmptyKeyW
SHAutoComplete
PathUnquoteSpacesA
StrCmpNIW
PathCanonicalizeW
SHCreateStreamOnFileA
SHCopyKeyA
StrStrIA
StrNCatW
PathFindOnPathW
SHEnumValueA
PathGetDriveNumberA
SHRegOpenUSKeyW
SHQueryInfoKeyA
StrCpyNW
ChrCmpIW
StrChrIW
SHRegCreateUSKeyW
StrFormatByteSizeW
PathSearchAndQualifyA
SHRegCloseUSKey
UrlCompareA
SHRegGetBoolUSValueA
StrToIntExW
PathCreateFromUrlA
PathFindSuffixArrayW
PathCommonPrefixW
PathIsURLW
SHDeleteValueW
SHGetValueW
StrTrimW
SHRegDuplicateHKey

ole32

OleLoad
CoIsHandlerConnected
MkParseDisplayName
OleTranslateAccelerator
OleSave
GetHGlobalFromStream
RevokeDragDrop
OleRegEnumFormatEtc
OleCreateMenuDescriptor
UtConvertDvtd32toDvtd16
GetConvertStg
StgIsStorageFile
CreateGenericComposite
CoTaskMemAlloc
StgOpenStorageEx
OleDoAutoConvert
OleGetClipboard
DoDragDrop
OleConvertOLESTREAMToIStorage
CreateDataAdviseHolder
CoRegisterClassObject
CoFreeUnusedLibraries
StgOpenStorage
CoGetObject
CoRevertToSelf
OleConvertIStorageToOLESTREAMEx
UtGetDvtd32Info
CoRegisterMessageFilter
CoGetMarshalSizeMax
CoUninitialize
GetHGlobalFromILockBytes
CoTaskMemFree
CreateILockBytesOnHGlobal
PropVariantCopy
UpdateDCOMSettings
CoDisconnectObject
CoMarshalInterThreadInterfaceInStream
OleLockRunning
CoRegisterSurrogate
CoGetCurrentLogicalThreadId
CoDosDateTimeToFileTime
ReadOleStg
CoRevokeClassObject
OleCreateStaticFromData
ReadClassStm
CoSuspendClassObjects
WriteClassStg
OleCreateLinkFromData
CreateAntiMoniker
CreateDataCache
CoInitializeEx
OleUninitialize
OpenOrCreateStream
CoGetPSClsid
OleLoadFromStream
CreateBindCtx
OleDuplicateData

advapi32

SetEntriesInAccessListA
LookupPrivilegeDisplayNameA
CryptDuplicateHash
SetNamedSecurityInfoExA
DuplicateTokenEx
QueryServiceLockStatusW
OpenServiceW
GetNamedSecurityInfoExA
CryptGetProvParam
CryptGenRandom
TrusteeAccessToObjectW
TrusteeAccessToObjectA
CryptDestroyHash
CryptDecrypt
RegRestoreKeyW
EnumServicesStatusA
RegEnumValueW
CryptSetProviderExW
SetSecurityInfoExA
GetTokenInformation
GetMultipleTrusteeOperationW
CryptSetHashParam
BuildImpersonateExplicitAccessWithNameA
OpenThreadToken
RegEnumKeyA
StartServiceA
GetSecurityDescriptorControl
RegOpenKeyW
GetAuditedPermissionsFromAclW
AddAuditAccessAce
GetServiceKeyNameW
CreateProcessAsUserA
RegOpenKeyA
SetNamedSecurityInfoExW
QueryServiceLockStatusA
LookupAccountNameA
ObjectPrivilegeAuditAlarmW
CryptEnumProvidersA
OpenServiceA
SetNamedSecurityInfoA
SetServiceStatus
SetEntriesInAuditListW
RegOpenKeyExA
RegQueryValueExW
CryptHashData
RegDeleteKeyW
CryptCreateHash
GetSecurityDescriptorGroup
RegRestoreKeyA
BuildTrusteeWithSidW
QueryServiceConfigW
GetUserNameW
StartServiceW
RegSetKeySecurity
ConvertSecurityDescriptorToAccessNamedA
RegSetValueA
GetSidSubAuthority
GetCurrentHwProfileW
ReportEventW
GetSidLengthRequired
SetServiceObjectSecurity
SetEntriesInAclA
RegCreateKeyA
CryptGetDefaultProviderW
GetSidSubAuthorityCount
ReadEventLogW
ClearEventLogW

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b7eb5c37b6f9c3b40871289c8e372b9a

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

shlwapi

ole32

advapi32

Sections

.text Size: 76KB - Virtual size: 76KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 12KB

.text
Size: 76KB - Virtual size: 76KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 12KB