c784860dd086b7b07da635ee5ba177de9e5cb4362547788240fd2a1efa6f8e61

Sharing

Copy URL Twitter E-mail

General

Target

c784860dd086b7b07da635ee5ba177de9e5cb4362547788240fd2a1efa6f8e61
Size

443KB
MD5

67fb2e705eb7c1aba8ea479e4d8876b7
SHA1

ddf96524a10dbb00088088f3c4edb77c31ec99b1
SHA256

c784860dd086b7b07da635ee5ba177de9e5cb4362547788240fd2a1efa6f8e61
SHA512

e85b78dd197d599af5ac3d413a0074488e719dd225bb8a1cc69f97715e41aada342a1505d631dea4e52080f2ebfb4e780476d3e4eae8e39fe6c5a14cff52b62f
SSDEEP

6144:IESQdtRrH8+qbavdj2jJSVkh+x3840aCOusOkTBksi3Kjqccgg2BAPc:IES8HpqevJ2jCkhqFC5MWsqb/Pc

Score

N/A

Malware Config

Signatures

Files

c784860dd086b7b07da635ee5ba177de9e5cb4362547788240fd2a1efa6f8e61
.exe windows x86

8e24e613f052268bddc9d13029d7afe7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExW
RegCreateKeyExW
DeregisterEventSource
ReportEventW
RegisterEventSourceW
FreeSid
CheckTokenMembership
DuplicateToken
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
CreateProcessAsUserW
DuplicateTokenEx
RevertToSelf
ImpersonateLoggedOnUser
RegQueryInfoKeyW
RegEnumValueW
OpenThreadToken
GetLengthSid
CopySid
LookupAccountNameW
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA

kernel32

SetEndOfFile
CreateMutexW
GetLocalTime
SystemTimeToFileTime
GetSystemDirectoryW
CreateEventW
ResetEvent
Sleep
CreateProcessW
LoadLibraryW
VirtualProtect
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
DeviceIoControl
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
ReleaseMutex
GetComputerNameW
CompareFileTime
TryEnterCriticalSection
GetExitCodeProcess
GetCurrentProcess
GetProcessHeap
DeleteFileA
MoveFileA
LocalAlloc
GetTempPathA
GetCurrentDirectoryW
CreateMutexA
HeapAlloc
GetVersion
HeapFree
GetSystemDirectoryA
FindFirstFileA
ReadProcessMemory
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
WTSGetActiveConsoleSessionId
GetCurrentProcessId
ProcessIdToSessionId
CompareStringW
RemoveDirectoryW
DeleteFileW
MoveFileExW
FindFirstFileW
CopyFileW
FindNextFileW
FindClose
CreateDirectoryW
GetFileAttributesW
SetFileAttributesW
LocalFree
GetModuleFileNameW
FormatMessageW
CreateThread
CreateFileW
GetFileSize
ReadFile
WaitForMultipleObjects
GetLastError
GetModuleHandleW
OpenEventW
SetEvent
CloseHandle
GetVersionExA
GetStartupInfoW
RtlUnwind
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapSize
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
FreeLibrary
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetUserDefaultLCID

gdi32

StartPage
StartDocA
SetMapMode
GetDeviceCaps
GetStockObject
SetBkMode
SetTextColor
CreateFontA
GetTextFaceA
GetTextMetricsW
SelectObject
DeleteObject
CreateSolidBrush
EndDoc
EndPage
DeleteDC

user32

GetParent
ShowWindow
GetDlgItem
SetTimer
DrawMenuBar
PostMessageW
GetSystemMenu
EnableWindow
SetWindowTextW
SendMessageW
KillTimer
LoadStringW
SetWindowLongW
EnableMenuItem
CheckDlgButton
GetDesktopWindow
LoadStringA
GetSysColor
MessageBoxW
GetDC
GetClientRect
MapWindowPoints
MoveWindow
ReleaseDC
GetWindowLongW
GetDlgCtrlID
SetCursor
CallWindowProcW
FillRect
DrawTextW
DrawFocusRect
LoadCursorW
DestroyCursor
SetDlgItemTextA
IsWindow
IsDlgButtonChecked
SetDlgItemTextW
GetWindowRect
GetSystemMetrics
SetWindowPos

ole32

CoCreateInstance
CoUninitialize
CoSetProxyBlanket
CoInitialize
CoCreateGuid
StringFromGUID2
CLSIDFromProgID

comdlg32

CommDlgExtendedError
PrintDlgA

comctl32

PropertySheetW
CreatePropertySheetPageW

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

wtsapi32

WTSQueryUserToken
WTSEnumerateSessionsW
WTSFreeMemory

crypt32

CryptUnprotectData

shell32

ShellExecuteA

oleaut32

SysAllocString
VariantClear
VariantInit
SysAllocStringByteLen
SysStringLen
SysAllocStringLen
SysFreeString

Sections

.text
Size: 362KB - Virtual size: 362KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e24e613f052268bddc9d13029d7afe7

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

ole32

comdlg32

comctl32

userenv

version

wtsapi32

crypt32

shell32

oleaut32

Sections

.text Size: 362KB - Virtual size: 362KB

.data Size: 30KB - Virtual size: 48KB

.rsrc Size: 19KB - Virtual size: 20KB

.reloc Size: 27KB - Virtual size: 26KB

.text
Size: 362KB - Virtual size: 362KB

.data
Size: 30KB - Virtual size: 48KB

.rsrc
Size: 19KB - Virtual size: 20KB

.reloc
Size: 27KB - Virtual size: 26KB