76c90a962bbac3c7dd951257ad0104c137a769c18c7738af49940db9ccf60707

Sharing

Copy URL Twitter E-mail

General

Target

76c90a962bbac3c7dd951257ad0104c137a769c18c7738af49940db9ccf60707
Size

425KB
MD5

6de16a6db720ba57f3adb4de0d2d32fc
SHA1

399c743b0af1fec65617b871677cf800afdb0fe9
SHA256

76c90a962bbac3c7dd951257ad0104c137a769c18c7738af49940db9ccf60707
SHA512

ce3d345029ed5c2a08a7911270bc5ad8412b8fef7cf4e46e0f3a01b4e0dd42fab993395a7e21ee3d29c9abf0792075d3cb9fc2aad02a79db977b45d78e8b9fe2
SSDEEP

12288:aY6ByjrwiKWfuMqePBGBg24V0Qh4IUkbCMY7:djk+uK5w4Vru7

Score

N/A

Malware Config

Signatures

Files

76c90a962bbac3c7dd951257ad0104c137a769c18c7738af49940db9ccf60707
.dll windows x86

506ae5edf7a32f8a68c1ec57a2f02db7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidToStringW
UuidFromStringW
UuidCreate
RpcStringFreeW

shell32

ShellExecuteExW
CommandLineToArgvW
SHCreateDirectoryExW
ShellExecuteW
SHGetFolderPathW

kernel32

FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDateFormatW
GetEnvironmentStringsA
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesW
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLongPathNameW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeExW
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
EnumSystemLocalesA
GetVersionExW
HeapAlloc
HeapCreate
HeapFree
ExpandEnvironmentStringsW
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
MoveFileExW
MoveFileW
MultiByteToWideChar
OpenEventA
OpenMutexW
OpenProcess
OutputDebugStringW
Process32FirstW
Process32NextW
QueryPerformanceCounter
RaiseException
EnterCriticalSection
ReleaseMutex
ResetEvent
RtlUnwind
SearchPathW
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SystemTimeToFileTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjects
WaitForSingleObject
WaitNamedPipeW
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
ExitThread
HeapReAlloc
ExitProcess
DisconnectNamedPipe
DeleteFileW
DeleteCriticalSection
CreateToolhelp32Snapshot
CreateThread
CreateProcessW
CreateMutexW
CreateFileA
CreateEventW
CreateEventA
CopyFileW
CompareStringW
CompareStringA
CloseHandle
CancelIo
AllocConsole
GetUserDefaultLCID
ReadFile

gdi32

CreateSolidBrush
SetBkColor

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

advapi32

RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
QueryServiceStatusEx
StartServiceW
SetTokenInformation
SetSecurityDescriptorSacl
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
OpenProcessToken
LookupPrivilegeValueW
InitializeSecurityDescriptor
GetUserNameW
FreeSid
DuplicateTokenEx
CreateProcessAsUserW
ControlService
CloseServiceHandle
CheckTokenMembership
AllocateAndInitializeSid
AdjustTokenPrivileges
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExW
RegSetValueExW
OpenServiceW
OpenSCManagerW

ole32

CoUninitialize
CoInitializeEx

wininet

InternetQueryOptionW
InternetQueryDataAvailable
InternetOpenW
InternetConnectW
InternetReadFile
HttpSendRequestW
HttpQueryInfoW
HttpOpenRequestW
HttpAddRequestHeadersA
InternetSetOptionW
InternetSetStatusCallbackW
InternetCloseHandle

shlwapi

PathCompactPathExW

user32

SetWindowTextW
ShowWindow
SetWindowPos
SetTimer
SetForegroundWindow
wsprintfW
SetActiveWindow
SendMessageW
PostMessageW
OffsetRect
MessageBoxW
LoadStringW
LoadImageW
KillTimer
IsWindow
GetWindowRect
GetSystemMetrics
GetParent
SetDlgItemTextW
CreateDialogParamW
BringWindowToTop
CopyRect
CreateWindowExW
DestroyWindow
DialogBoxParamW
EnableWindow
EndDialog
ExitWindowsEx
GetClientRect
GetDesktopWindow
GetDlgItem
GetDlgItemTextW

Exports

Exports

ClearFreeList
GetItem
ImportError
List_SetItem
SetAttr
String_Format
_GetSlice
set_rows

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 249KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

506ae5edf7a32f8a68c1ec57a2f02db7

Headers

File Characteristics

Imports

rpcrt4

shell32

kernel32

gdi32

version

advapi32

ole32

wininet

shlwapi

user32

Exports

Exports

Sections

.text Size: 81KB - Virtual size: 80KB

.rdata Size: 249KB - Virtual size: 249KB

.data Size: 69KB - Virtual size: 69KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 81KB - Virtual size: 80KB

.rdata
Size: 249KB - Virtual size: 249KB

.data
Size: 69KB - Virtual size: 69KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 5KB - Virtual size: 4KB