c5f63cabd2df53e2ebb73a06a2fd6976b31900bc0a7418bbc64e4f6e76aba4bc

Sharing

Copy URL Twitter E-mail

General

Target

c5f63cabd2df53e2ebb73a06a2fd6976b31900bc0a7418bbc64e4f6e76aba4bc
Size

256KB
MD5

7326d217687cba0bd6df0a9a643cbfa0
SHA1

8010393b8e0ca5f2965696be9d4612a3036f5f70
SHA256

c5f63cabd2df53e2ebb73a06a2fd6976b31900bc0a7418bbc64e4f6e76aba4bc
SHA512

604e772cbba3b331cab5a76896559f2a46cec186c61952bce721a5c1553b72169b3b9f0f3c64de96ac256192e3328512e2aa5751e1c708551527b503dde98b92
SSDEEP

6144:N/v+QxpMTIxiOSvY987haFsKv8zI/DRuG+kHf1tDoI:NHxpMUcOSvY987UsOMtQnr

Score

N/A

Malware Config

Signatures

Files

c5f63cabd2df53e2ebb73a06a2fd6976b31900bc0a7418bbc64e4f6e76aba4bc
.exe windows x86

0b0ea648b180ed5cf3b5298c0c0eda3d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

user32

CharNextW
DestroyIcon
DestroyWindow

ole32

CoTaskMemAlloc
CoTaskMemFree
CoSetProxyBlanket
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
CoUninitialize
CoTaskMemRealloc

shell32

SHGetFolderPathW

ws2_32

send
htonl

oleaut32

VariantClear
VarUI4FromStr
SysFreeString
SysAllocString
VariantInit

shlwapi

PathAddBackslashW

psapi

GetPerformanceInfo

rpcrt4

UuidCreate

kernel32

FindNextFileW
IsWow64Process
LocalAlloc
HeapDestroy
LocalFree
LeaveCriticalSection
HeapFree
CreateFileW
HeapReAlloc
DisconnectNamedPipe
TlsSetValue
ReleaseMutex
HeapSize
FindResourceExW
SetWaitableTimer
GetCurrentThreadId
lstrlenA
FindClose
WaitForMultipleObjectsEx
CancelWaitableTimer
DeleteCriticalSection
GetProcessHeap
EnterCriticalSection
FormatMessageW
FindResourceW
ResumeThread
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
FreeLibrary
WriteFile
CreateEventW
SizeofResource
HeapAlloc
LoadLibraryExW
SetEndOfFile
IsDebuggerPresent
CreateProcessW
CreateMutexW
GetFileSizeEx
WideCharToMultiByte
CreateSemaphoreW
lstrlenW
ReleaseSemaphore
GetSystemTimeAsFileTime
RegisterWaitForSingleObject
CloseHandle
SetFileAttributesW
SetUnhandledExceptionFilter
ResetEvent
GetSystemInfo
CreateDirectoryW
GlobalFree
UnhandledExceptionFilter
LockResource
LoadResource
GetLocalTime
CancelIo
UnregisterWaitEx
FindFirstFileW
ConnectNamedPipe
CreateWaitableTimerW
CreateNamedPipeW
ReadFile
WaitForSingleObject
DisableThreadLibraryCalls
RaiseException
SetFilePointerEx
GetOverlappedResult
lstrcmpiW
GetModuleHandleW
IsValidCodePage
VirtualAllocEx

advapi32

CryptReleaseContext
MakeSelfRelativeSD
OpenProcessToken
RegOpenKeyExW
CopySid
RegDeleteKeyW
CryptAcquireContextW
TraceMessage
GetAclInformation
CryptGenRandom
CryptCreateHash
InitializeAcl
GetLengthSid
GetTraceLoggerHandle
CryptDestroyHash
GetSecurityDescriptorLength
GetTraceEnableFlags
AddAce
CryptDestroyKey
RegCreateKeyExW
RegEnumKeyExW
SetNamedSecurityInfoW
ControlTraceW
GetSecurityDescriptorSacl
GetTraceEnableLevel
CryptHashData
IsValidSid
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCloseKey
GetTokenInformation
GetSecurityDescriptorGroup
UnregisterTraceGuids
RegisterTraceGuidsW
RegQueryInfoKeyW
RegSetValueExW
GetSecurityDescriptorOwner
ConvertSidToStringSidW
GetAce
GetSecurityDescriptorDacl
CryptGetHashParam
GetSecurityDescriptorControl
RegQueryValueExW

mscms

CreateColorTransformW
IsColorProfileTagPresent
SetColorProfileElementReference
SetStandardColorSpaceProfileW
DeleteColorTransform
GetColorProfileElementTag

modemui

CountryRunOnce

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.TA
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dj
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.felE
Size: 1KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QDf
Size: 1KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 213KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b0ea648b180ed5cf3b5298c0c0eda3d

Headers

DLL Characteristics

File Characteristics

Imports

iphlpapi

user32

ole32

shell32

ws2_32

oleaut32

shlwapi

psapi

rpcrt4

kernel32

advapi32

mscms

modemui

Sections

.text Size: 19KB - Virtual size: 19KB

.TA Size: 2KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 4KB

.dj Size: 2KB - Virtual size: 1KB

.felE Size: 1KB - Virtual size: 11KB

.QDf Size: 1KB - Virtual size: 12KB

.data Size: 213KB - Virtual size: 240KB

.rsrc Size: 11KB - Virtual size: 11KB

.text
Size: 19KB - Virtual size: 19KB

.TA
Size: 2KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 4KB

.dj
Size: 2KB - Virtual size: 1KB

.felE
Size: 1KB - Virtual size: 11KB

.QDf
Size: 1KB - Virtual size: 12KB

.data
Size: 213KB - Virtual size: 240KB

.rsrc
Size: 11KB - Virtual size: 11KB