ea813f4259ea8322589d4bcd78ed67de14195b2129bdd35b12322b8bdd24cc21

Sharing

Copy URL

Twitter E-mail

General

Target

ea813f4259ea8322589d4bcd78ed67de14195b2129bdd35b12322b8bdd24cc21
Size

141KB
MD5

40b9d8abbed81800fe810f107d80ef30
SHA1

79572326123159e93584bd3e033b37f613253d5f
SHA256

ea813f4259ea8322589d4bcd78ed67de14195b2129bdd35b12322b8bdd24cc21
SHA512

be2f0c1811867f94c4085448fbb2d04c338dee84c9bd5499e6ee8d4f916cfe6c1f7c6e7544e4660c49a24d0d8df9df50a5c070e4d5841e3f3d638d228febe6e1
SSDEEP

3072:BYrcXuT/q4kfG4joOCYrRMc0KnsqhcZd2o4NM/:BYoXuTiSdc0Knv8dd4NS

Score

N/A

Malware Config

Signatures

Files

ea813f4259ea8322589d4bcd78ed67de14195b2129bdd35b12322b8bdd24cc21
.exe windows x86

a6cef1827545673035a388548437ddcc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

malloc
free
printf
_getche
__CxxFrameHandler
localtime
_vsnwprintf
wcschr
towupper
_wcsnicmp
wcscmp
wcscspn
iswspace
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
_wcsicmp
wcscat
wcsstr
_except_handler3
??0exception@@QAE@XZ
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
_CxxThrowException
_beginthreadex
_purecall
??0exception@@QAE@ABV0@@Z
_endthreadex
swprintf
_wtoi64
_controlfp
wcscpy
wcslen
_ui64tow
wcstok

msvcp60

??0bad_alloc@std@@QAE@PBD@Z
??1bad_alloc@std@@UAE@XZ
??0bad_alloc@std@@QAE@ABV01@@Z
?move@?$char_traits@G@std@@SAPAGPAGPBGI@Z
?length@?$char_traits@G@std@@SAIPBG@Z
?_Xlen@std@@YAXXZ
?copy@?$char_traits@G@std@@SAPAGPAGPBGI@Z
?_Xran@std@@YAXXZ
?compare@?$char_traits@G@std@@SAHPBG0I@Z
?assign@?$char_traits@G@std@@SAXAAGABG@Z
?find@?$char_traits@G@std@@SAPBGPBGIABG@Z

atl

ord30

advapi32

RegOpenKeyExW
RegQueryValueExW
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegCreateKeyExW
RegSetValueExW
RegCloseKey
TraceMessage
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
ReportEventW
InitializeSecurityDescriptor
InitializeAcl
SetSecurityDescriptorDacl
MakeSelfRelativeSD
IsValidSid
GetLengthSid
LookupAccountNameW
OpenProcessToken
GetTokenInformation
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
AddAccessDeniedAce
AddAccessAllowedAce
SetServiceStatus
RegisterEventSourceW

kernel32

GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetSystemDirectoryW
WideCharToMultiByte
LocalFree
ExpandEnvironmentStringsW
ExitProcess
CreateThread
GetSystemInfo
InterlockedCompareExchange
CreateSemaphoreW
ReleaseSemaphore
GetLocalTime
GetComputerNameW
InterlockedIncrement
InterlockedDecrement
CancelIo
CloseHandle
GetLastError
CreateIoCompletionPort
ResumeThread
WaitForSingleObject
SetEvent
CreateEventW
LeaveCriticalSection
GetTickCount
EnterCriticalSection
SetThreadPriority
InitializeCriticalSection
DeleteCriticalSection
Sleep
PostQueuedCompletionStatus
ResetEvent
GetQueuedCompletionStatus

rpcrt4

RpcStringFreeW
UuidToStringW

user32

CharLowerW
CharUpperW
wsprintfW

oleaut32

SystemTimeToVariantTime
VariantChangeType
SysStringByteLen
SysAllocStringByteLen
SysStringLen
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
VariantClear
VariantCopy
VariantInit
SysAllocString
SysFreeString
GetErrorInfo

ole32

CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoInitializeEx
CoUninitialize
OleRun

mqrt

MQReceiveMessageByLookupId
MQOpenQueue
MQPathNameToFormatName
MQReceiveMessage
MQCloseQueue
MQCloseCursor
MQCreateCursor
MQCreateQueue

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hymkjrz
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a6cef1827545673035a388548437ddcc

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

msvcp60

atl

advapi32

kernel32

rpcrt4

user32

oleaut32

ole32

mqrt

Sections

.text Size: 109KB - Virtual size: 109KB

.data Size: 2KB - Virtual size: 5KB

.rsrc Size: 28KB - Virtual size: 29KB

hymkjrz Size: - Virtual size: 4KB

.text
Size: 109KB - Virtual size: 109KB

.data
Size: 2KB - Virtual size: 5KB

.rsrc
Size: 28KB - Virtual size: 29KB

hymkjrz
Size: - Virtual size: 4KB