c4c729bb7ac11288f0021156bce9e10b1252040a2947e3b4741ec510748e6583

Sharing

Copy URL Twitter E-mail

General

Target

c4c729bb7ac11288f0021156bce9e10b1252040a2947e3b4741ec510748e6583
Size

70KB
MD5

76de6709faf71497271b50049f192500
SHA1

34d7053939186a2f92dd735fed8fed575c3f6f93
SHA256

c4c729bb7ac11288f0021156bce9e10b1252040a2947e3b4741ec510748e6583
SHA512

709f8d7e80eac8219d2d58b5933a7730cb5639a52c97814a93857fd655e5daf7f8733c8d3c13a969f16e2af43c60fbfcc26178120f93ca00a78e369c3cbe3900
SSDEEP

1536:qR2F//nqjaX/aXov8NSGduPsfWi5UsXmhDAx:+c/fq+PhkSGdkIl5/Wh0x

Score

N/A

Malware Config

Signatures

Files

c4c729bb7ac11288f0021156bce9e10b1252040a2947e3b4741ec510748e6583
.exe windows x86

3c41b56f6a2ad3373873d4f1563515fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

DispGetParam
SysAllocStringLen
VariantCopy
SysAllocString
SysStringLen
LoadRegTypeLi
VariantInit
VarBstrCmp
CreateErrorInfo
VariantClear
LoadTypeLi
VarUI4FromStr
SetErrorInfo
SysAllocStringByteLen
GetErrorInfo
SysStringByteLen
SysFreeString

advapi32

RegDeleteKeyW
LsaQueryInformationPolicy
OpenSCManagerW
LsaFreeMemory
RegQueryValueExW
ControlService
OpenServiceW
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegOpenKeyW
LsaOpenPolicy
RegQueryInfoKeyW
RegCloseKey
RegOpenKeyExW
QueryServiceStatus
RegEnumKeyExW
LsaClose
QueryServiceConfigW
CloseServiceHandle

msi

ord17
ord45
ord116
ord88
ord159
ord121
ord171
ord32
ord204
ord113
ord111
ord137
ord169
ord190
ord115
ord141
ord125
ord211
ord8
ord160
ord118
ord70
ord92
ord205
ord120

cabinet

ord22
ord21
ord23
ord20

ws2_32

closesocket
inet_addr
bind
WSACleanup
gethostbyname
ntohs
inet_ntoa
WSAStartup
htons
socket
getsockname

ole32

CoTaskMemRealloc
OleRun
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoInitialize
StringFromGUID2
StringFromCLSID
CoUninitialize
CoTaskMemAlloc
CoInitializeEx
CoCreateInstance

shlwapi

PathCombineW
PathRemoveFileSpecW
PathFileExistsW
PathCanonicalizeW

shell32

SHGetPathFromIDListW
SHGetMalloc
CommandLineToArgvW
SHGetSpecialFolderPathW
SHGetFolderPathW
SHBrowseForFolderW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

setupapi

SetupIterateCabinetW

crypt32

CertFreeCertificateContext
CertFreeCertificateChain
CryptDecodeObject
CryptMsgClose
CryptUnprotectData
CertGetCertificateChain
CertVerifyCertificateChainPolicy
CryptMsgGetParam
CryptQueryObject
CryptMsgGetAndVerifySigner
CertCloseStore
CryptHashPublicKeyInfo

wintrust

WinVerifyTrust

kernel32

SystemTimeToFileTime
TlsAlloc
InterlockedPushEntrySList
LoadLibraryExW
GetSystemDirectoryW
RtlUnwind
Process32NextW
WaitNamedPipeW
DeleteCriticalSection
UnmapViewOfFile
lstrcmpW
GetShortPathNameW
TlsSetValue
ReleaseMutex
GetFileTime
GetStdHandle
EnumSystemLocalesA
CreateEventW
DuplicateHandle
UnhandledExceptionFilter
ResumeThread
SizeofResource
Module32FirstW
CopyFileW
GetFileSizeEx
CreateThread
IsProcessorFeaturePresent
SetEndOfFile
FindFirstFileW
CreateDirectoryW
MulDiv
GetSystemInfo
FlushFileBuffers
SetLastError
HeapFree
CreateProcessW
WriteConsoleW
lstrlenA
IsValidCodePage
lstrcmpiW
HeapDestroy
GetFullPathNameW
lstrcmpA
GetComputerNameW
GetSystemTimeAsFileTime
HeapReAlloc
GetACP
GetModuleHandleW
ReadFile
SetEnvironmentVariableA
GetOverlappedResult
VirtualAlloc
GetTempFileNameW
GetSystemWindowsDirectoryW
GetTimeZoneInformation
HeapAlloc
Process32FirstW
CompareStringW
CreateMutexW
CreateFileW
SetUnhandledExceptionFilter
GetOEMCP
EnterCriticalSection
FileTimeToSystemTime
CreateFileMappingW
WriteFile
CreateNamedPipeW
WideCharToMultiByte
InterlockedPopEntrySList
CloseHandle
WaitForMultipleObjects
GetProcessHeap
SetFilePointer
FindResourceW
HeapSize
FindNextFileW
LocalAlloc
LockResource
GetConsoleMode
MapViewOfFile
OpenProcess
GetConsoleCP
GetWindowsDirectoryW
DeleteFileW
GetFileType
OutputDebugStringW
FreeLibrary
FindResourceExW
GetCommandLineW
FreeEnvironmentStringsW
GetPrivateProfileStringW
GetFileInformationByHandle
InitializeCriticalSectionAndSpinCount
IsWow64Process
LCMapStringW
LoadResource
GetSystemTime
CompareFileTime
IsValidLocale
TlsFree
SetHandleCount
EnumUILanguagesW
ExpandEnvironmentStringsW
GetCommandLineA
WritePrivateProfileSectionW
WaitForSingleObject
FindFirstFileExW
TlsGetValue
ConnectNamedPipe
GetDriveTypeW
CreateToolhelp32Snapshot
IsDebuggerPresent
CancelIo
RemoveDirectoryW
OpenMutexW
GetCurrentThreadId
LeaveCriticalSection
RaiseException
FlushInstructionCache
FormatMessageW
GetLocalTime
GetFileSize
LocalFree
PeekNamedPipe
GetCurrentDirectoryW
GetTempPathW
VirtualFree
DisconnectNamedPipe
SetStdHandle
ResetEvent
lstrlenW
GetFileAttributesExW
GetUserDefaultLCID
FindClose
ExitThread
VirtualAllocEx
GetStartupInfoA
OpenWaitableTimerW
AddAtomA
lstrcpyW
GetVolumeInformationA
GetAtomNameA
CreateMailslotA
SetComputerNameA
CopyFileExA
GetNumberFormatW
GetDateFormatA
lstrcmpiA
GetCalendarInfoW
GetLogicalDrives
GetSystemDefaultLangID
ReplaceFileW
GetWindowsDirectoryA
EnumDateFormatsA
BeginUpdateResourceA
GetVolumeInformationW
GetLongPathNameW
OpenMutexA
GetLogicalDriveStringsA
SetComputerNameW
CreateSemaphoreW
CreateEventA
OpenFile
ReadDirectoryChangesW
GetSystemDefaultLCID
GetExpandedNameW
GetComputerNameA
GetDiskFreeSpaceW
GetTempPathA
lstrcat
lstrcpynA
ReplaceFileA
GetModuleHandleA
AddAtomW
SearchPathA
lstrcpyA

user32

BeginPaint
MonitorFromWindow
DispatchMessageW
GetDlgItem
LoadCursorW
DefWindowProcW
PeekMessageW
SetWindowTextW
GetSystemMetrics
CallWindowProcW
GetWindowRect
EndDialog
SetDlgItemTextW
SystemParametersInfoW
SendMessageW
UnregisterClassA
SetCapture
GetWindow
CharPrevW
DestroyWindow
GetDlgItemTextW
GetClientRect
GetMonitorInfoW
GetClassInfoExW
RegisterClassExW
MsgWaitForMultipleObjects
SetCursor
EndPaint
GetWindowLongW
DialogBoxParamW
SetWindowPos
CreateWindowExW
GetActiveWindow
MessageBoxW
ReleaseCapture
MapWindowPoints
ReleaseDC
GetDC
CharNextW
TranslateMessage
GetParent
SetWindowLongW
SetCursorPos
SetTimer
PostQuitMessage
wvsprintfW
LoadIconW
CharNextA
SetActiveWindow
SetFocus
WaitMessage
GetMenuItemRect
CopyIcon
wvsprintfA
MessageBoxA
LoadMenuIndirectA
SendDlgItemMessageW
SetMenu
ShowWindow
LoadMenuIndirectW
LoadBitmapA
GetTopWindow
CreateAcceleratorTableA
AppendMenuA
GetSubMenu
CreateDialogParamW
InsertMenuItemA
CharPrevA
InvalidateRgn
CharUpperA
SetDlgItemTextA
LoadIconA
IsDlgButtonChecked
SetForegroundWindow
MessageBoxIndirectW
SendDlgItemMessageA
TrackPopupMenuEx
GetWindowRgn
FindWindowW
RemoveMenu
InvalidateRect
DestroyCursor
GetFocus
WinHelpA
GetClassInfoExA
CreateAcceleratorTableW
GetDlgItemTextA
OpenClipboard
GetMenuState
IsMenu
LoadImageW
SetDlgItemInt
FindWindowA
UpdateLayeredWindow
GetMessageA
GetMenuItemCount
InsertMenuA
LoadMenuW
EnableMenuItem

gdi32

DeleteObject
CreateFontIndirectW
GetDeviceCaps
GetEnhMetaFileA
CreateColorSpaceW
AddFontResourceA
CreateDIBPatternBrushPt
RemoveFontResourceExA
CreateBitmapIndirect
CreateFontIndirectExA
GetMetaFileA
CreateEllipticRgn
RemoveFontResourceA
RemoveFontResourceW
CreateICA
CreateScalableFontResourceW
CreatePolyPolygonRgn
ExtCreateRegion
CreateCompatibleDC
GetRasterizerCaps
CreateMetaFileW
GetStockObject
CreateHatchBrush
CreateMetaFileA

cmutil

CmWinHelp
CmLoadImageW
WzToSz
IsLogonAsSystem
CmAtolW
CmConvertRelativePathW
CmStrrchrA
MakeBold
CmLoadStringW
CmStrtokA
CmEndOfStrW
CmStrStrA
CmBuildFullPathFromRelativeA
CmStrchrW
CmAtolA
ReleaseBold
CmStripPathAndExtW
CmStrCatAllocW

msimg32

TransparentBlt
GradientFill

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c41b56f6a2ad3373873d4f1563515fd

Headers

File Characteristics

Imports

oleaut32

advapi32

msi

cabinet

ws2_32

ole32

shlwapi

shell32

version

setupapi

crypt32

wintrust

kernel32

user32

gdi32

cmutil

msimg32

Sections

.text Size: 26KB - Virtual size: 26KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 29KB - Virtual size: 30KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 26KB - Virtual size: 26KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 29KB - Virtual size: 30KB

.rsrc
Size: 2KB - Virtual size: 1KB