9e3370877ffa4cb72b5336e299aa92817604e175dbd849aa1887294468e6a7a8

Sharing

Copy URL Twitter E-mail

General

Target

9e3370877ffa4cb72b5336e299aa92817604e175dbd849aa1887294468e6a7a8
Size

1.2MB
MD5

0784c09912e2291269be2275d8a0cc9a
SHA1

6c1ca1657c59d62c1458f09b438a4d2056cf09fd
SHA256

9e3370877ffa4cb72b5336e299aa92817604e175dbd849aa1887294468e6a7a8
SHA512

37b28514532939c95873cca3a8c142cebb2ddc5b8ea0dc271bc9b634e17096512780fefeb8c2e42536df2736a87cd62ca0b8c05a24ee0ca9952fdbd5ea7a06bd
SSDEEP

24576:Gyq/7WJU45bvLl1pnngaeIvCHk2HdaWupPPcH0prKOOZio8sHvK+BlqG:G1/7WJU45bvLl1pnnNXIJupPi0kZiZsB

Score

N/A

Malware Config

Signatures

Files

9e3370877ffa4cb72b5336e299aa92817604e175dbd849aa1887294468e6a7a8
.exe windows x86

929879191b781359908bef05d2a18e83

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntW
LCMapStringW
GetStringTypeW
GetLocaleInfoA
RtlUnwind
VirtualAlloc
HeapAlloc
IsValidCodePage
GetACP
FreeEnvironmentStringsW
EnterCriticalSection
GetSystemTimeAsFileTime
VirtualFree
HeapCreate
InterlockedIncrement
TlsGetValue
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
DeleteCriticalSection
lstrcmpiW
InitializeCriticalSection
LeaveCriticalSection
Sleep
GetLastError
CloseHandle
FindClose
InterlockedExchange
WaitForSingleObject
ReleaseMutex
UnmapViewOfFile
MapViewOfFile
VerifyVersionInfoW
FileTimeToSystemTime
FlushFileBuffers
CreateDirectoryW
GetProcAddress
LoadLibraryW
MultiByteToWideChar
GetSystemInfo
lstrcmpiA
GetModuleHandleW
FreeLibrary
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleHandleA
TryEnterCriticalSection
LoadLibraryExW
DeleteFileW
OutputDebugStringA
CreateFileMappingW
CreateMutexW
TlsFree
TlsAlloc
GetExitCodeThread
OpenThread
VirtualQuery
GetShortPathNameW
CreateFileMappingA
InterlockedCompareExchange
CreateFileA
UnhandledExceptionFilter
IsDebuggerPresent
FindNextFileW
GetFileAttributesExW
VerSetConditionMask
SetFilePointer
GetLocalTime
GetModuleFileNameW
GetModuleFileNameA
GetStdHandle
ExitProcess
GetCPInfo
WriteConsoleW
GetConsoleOutputCP
RaiseException
SetStdHandle
IsDBCSLeadByteEx
WideCharToMultiByte
MoveFileExW
GetCommandLineA
HeapDestroy
WriteFile
TlsSetValue
InterlockedDecrement
GetEnvironmentStrings
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetOEMCP
HeapSize
GetStringTypeA
LocalFree
SetLastError
RemoveDirectoryA

user32

wsprintfW

advapi32

RegCloseKey
RegQueryValueExA
SetSecurityDescriptorDacl
GetLengthSid
GetTokenInformation
OpenProcessToken
FreeSid
AllocateAndInitializeSid
LookupAccountNameW
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
RegQueryValueExW
ReportEventW
RegSetValueExW
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetSecurityDescriptorOwner
RegOpenKeyExA
RegDeleteKeyW
RegSetKeySecurity
RegCreateKeyExA
GetAce
IsValidSid

msvcrt

getenv
fwrite
free
gmtime
fputc
fprintf
puts
memcmp
malloc
pow
fread
wcslen

crypt32

CertGetPublicKeyLength
CertCreateCertificateContext

shlwapi

PathRemoveFileSpecW
PathAppendW

Sections

.text
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

929879191b781359908bef05d2a18e83

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

crypt32

shlwapi

Sections

.text Size: 116KB - Virtual size: 112KB

.rdata Size: 72KB - Virtual size: 68KB

.data Size: 72KB - Virtual size: 2.2MB

.rsrc Size: 76KB - Virtual size: 75KB

.text
Size: 116KB - Virtual size: 112KB

.rdata
Size: 72KB - Virtual size: 68KB

.data
Size: 72KB - Virtual size: 2.2MB

.rsrc
Size: 76KB - Virtual size: 75KB