44a325f0923fdb0bee6e23e8cd181a7328f21e7730dbe53d2e167b275a13c22d

Sharing

Copy URL Twitter E-mail

General

Target

44a325f0923fdb0bee6e23e8cd181a7328f21e7730dbe53d2e167b275a13c22d
Size

685KB
MD5

5095cf69b3f2ecac29a43829afcf39c0
SHA1

5386bde85aa18b59472d2fec7066481629fae2cb
SHA256

44a325f0923fdb0bee6e23e8cd181a7328f21e7730dbe53d2e167b275a13c22d
SHA512

80c927c40cc1979b1347e30ed79b4860482681dc4bb9512a01369d6e40f2e132322aa90da72bcf6a9668c5cfab6e24f632bf476af7cbfde3f2b71181b31317f9
SSDEEP

12288:PSB4DTpDGI3cYfOOyrXvwbTAJwiOSrFEleUEnP4FYxBOSD0pBB3IpsYIozLBE/Pm:aBeTII3cMTyLvwASikleUEQaxBZoH1W3

Score

N/A

Malware Config

Signatures

Files

44a325f0923fdb0bee6e23e8cd181a7328f21e7730dbe53d2e167b275a13c22d
.exe windows x86

66fa9d82149737e3a2392c3282ade34c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

gdi32

EnumFontsW
CreateDIBSection
Escape
GetClipBox
GetWinMetaFileBits
XLATEOBJ_piVector
GetEnhMetaFileDescriptionA
EngCreateBitmap
GetTextExtentExPointW
CreateBitmap
CreateEllipticRgn
EngQueryLocalTime
PaintRgn
Chord
GetMapMode
GetViewportOrgEx
SetBkMode
PlayEnhMetaFileRecord
MaskBlt
SetDCPenColor
ExtCreateRegion
CreateDIBitmap
GetObjectType
GetGraphicsMode
GdiStartDocEMF
PtVisible

oleaut32

GetErrorInfo
VariantChangeType
SysReAllocStringLen
VariantInit
VariantChangeTypeEx
GetActiveObject
SysFreeString
VariantClear
SysAllocStringLen
SysAllocStringByteLen
SafeArrayGetUBound
SafeArrayPtrOfIndex
SafeArrayGetLBound
VariantCopyInd

iphlpapi

InternalSetTcpEntry
GetIpStatistics
GetUdpStatistics
InternalGetIfTable
InternalSetIfEntry
FlushIpNetTable
InternalGetUdpTable
GetIpForwardTable
GetAdaptersInfo
GetIpNetTable
NhGetInterfaceNameFromGuid
SendARP
GetNetworkParams
GetIcmpStatistics
InternalGetIpAddrTable
GetNumberOfInterfaces
AllocateAndGetIpAddrTableFromStack
EnableRouter
CreateProxyArpEntry
GetPerAdapterInfo
InternalDeleteIpForwardEntry
GetIfTable
InternalSetIpStats
GetTcpStatistics

odbc32

ValidateErrorQueue
CursorLibLockDesc
VRetrieveDriverErrorsRowCol
VFreeErrors
SQLPrimaryKeys
CursorLibLockStmt
CursorLibTransact
LockHandle
PostODBCError
PostODBCComponentError
CursorLibLockDbc
SearchStatusCode

advapi32

GetCurrentHwProfileW
FreeEncryptionCertificateHashList
GetCurrentHwProfileA
RegCreateKeyW
OpenThreadToken
SetKernelObjectSecurity
SetEntriesInAclW
LookupAccountSidA
SystemFunction036
RegCreateKeyExW
CryptEncrypt
SetNamedSecurityInfoA
LsaOpenSecret
RegSetValueExA
CryptDestroyHash
CryptGetHashParam
GetSecurityInfo
LockServiceDatabase
RegLoadKeyA

shell32

SHSetLocalizedName
SHGetFolderLocation
SHGetSettings
ShellExecuteExA
SHFormatDrive
SHCreateDirectoryExW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetFileInfoA
DragFinish
SHChangeNotify
DuplicateIcon
ShellExecuteA
SHParseDisplayName
Shell_NotifyIconA
ShellExecuteExW
SHGetPathFromIDListA

kernel32

InterlockedExchangeAdd
EnumResourceTypesA
WriteFile
GetProcessPriorityBoost
ScrollConsoleScreenBufferA
IsDBCSLeadByteEx
GetVersion
GetModuleHandleW
SizeofResource
InterlockedDecrement
InitializeCriticalSection
RegisterWaitForInputIdle
ExitProcess
IsBadCodePtr
GetCurrentThread
WideCharToMultiByte
GetDefaultCommConfigW
LoadLibraryW
LocalCompact
VirtualAlloc
SetThreadContext
IsValidLocale
GlobalMemoryStatus
OpenProcess
CreateWaitableTimerA

Sections

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 15KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 169KB - Virtual size: 394KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 283KB - Virtual size: 337KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 167KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

66fa9d82149737e3a2392c3282ade34c

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

oleaut32

iphlpapi

odbc32

advapi32

shell32

kernel32

Sections

.data Size: 6KB - Virtual size: 6KB

.text Size: 15KB - Virtual size: 299KB

.data Size: 169KB - Virtual size: 394KB

.bss Size: 283KB - Virtual size: 337KB

.rdata Size: 167KB - Virtual size: 170KB

.rsrc Size: 43KB - Virtual size: 42KB

.data
Size: 6KB - Virtual size: 6KB

.text
Size: 15KB - Virtual size: 299KB

.data
Size: 169KB - Virtual size: 394KB

.bss
Size: 283KB - Virtual size: 337KB

.rdata
Size: 167KB - Virtual size: 170KB

.rsrc
Size: 43KB - Virtual size: 42KB