b104988168a60763dd73f63534d5c4cc3f30102e446effdc579ec73c4527c31e

Sharing

Copy URL

Twitter E-mail

General

Target

b104988168a60763dd73f63534d5c4cc3f30102e446effdc579ec73c4527c31e
Size

107KB
MD5

3068bedabcbf62b964fd896ffa4582ae
SHA1

5d3648fb905118fe30f7204b9cf4eb12b1332e6b
SHA256

b104988168a60763dd73f63534d5c4cc3f30102e446effdc579ec73c4527c31e
SHA512

ace5de9a0dfecf002f20f99a9b96955839b305b8324734c645515671e81d0616706980a8b3488a5bcc912d0e8f15f38aa192df1f66c98076128dbb1fd974baad
SSDEEP

1536:qovKqC9Jt8huBeGuWUG8mlyzGqotaRN8sR3tQqzK4Ek7:jvKXkMeGu/zGPaos2

Score

N/A

Malware Config

Signatures

Files

b104988168a60763dd73f63534d5c4cc3f30102e446effdc579ec73c4527c31e
.exe windows x86

3e411b26227544071875ec8ea2349f5f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RevertToSelf
ImpersonateLoggedOnUser
EventWrite
RegGetValueW
MakeAbsoluteSD
ConvertStringSecurityDescriptorToSecurityDescriptorW
EventUnregister
EventRegister

kernel32

LoadLibraryW
CreateThread
SetEvent
GetTickCount
GetExitCodeThread
WaitForMultipleObjects
ResumeThread
CreateEventW
GlobalFree
Sleep
CreateFileW
SetPriorityClass
GetCurrentProcess
HeapSetInformation
CompareStringW
GetProcAddress
InterlockedCompareExchange
LoadLibraryA
CloseHandle
ReleaseMutex
WaitForSingleObject
GetCurrentProcessId
GetCurrentThreadId
LoadLibraryExW
FreeLibrary
GetLocaleInfoW
GetUserPreferredUILanguages
SetThreadPreferredUILanguages
QueueUserWorkItem
LocalAlloc
GetCommandLineW
LocalFree
DelayLoadFailureHook
InterlockedExchange
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
LockResource
LoadResource
FindResourceExW
GetLastError

gdi32

SetDCBrushColor
GetStockObject
GetDeviceCaps
CreateRectRgn
SelectClipRgn
ExcludeClipRect
CreateCompatibleDC
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
BitBlt
CreateCompatibleBitmap

user32

GetWindowTextW
GetWindowRect
GetAncestor
SystemParametersInfoW
FillRect
GetSystemMetrics
GetDC
SetThreadDesktop
OpenDesktopW
GetClassNameW
GetForegroundWindow
FlashWindowEx
SetPropW
DestroyWindow
PostMessageW
UnregisterClassW
DispatchMessageW
TranslateMessage
GetMessageW
ShowWindow
GetDesktopWindow
EnumWindows
LoadCursorW
LoadStringW
SetProcessDPIAware
RegisterClassW
FindWindowA
GetWindowThreadProcessId
DefWindowProcW
BeginPaint
GetWindowDC
ReleaseDC
PostQuitMessage
GetWindowLongW
SetWindowLongW
GetThreadDesktop
OpenInputDesktop
CloseDesktop
GetUserObjectInformationW
LoadIconW
GetParent
CreateWindowExW
GetWindowInfo
DestroyIcon
EndPaint

msvcrt

_vsnwprintf
memset
_wtoi
_wtol
_errno
_wcsicmp
swscanf_s
wcsrchr
wcschr
_cexit
_exit
memcpy
_ismbblead
exit
_acmdln
_controlfp
?terminate@@YAXXZ
_except_handler4_common
__set_app_type
printf
__p__fmode
__p__commode
_XcptFilter
_amsg_exit
_initterm
_adjust_fdiv
__getmainargs
__setusermatherr

ntdll

RtlFreeHeap
RtlNtStatusToDosError
NtQueryInformationToken
RtlNtStatusToDosErrorNoTeb
NtDuplicateToken
NtClose
WinSqmAddToStream
NtOpenProcess
NtWriteVirtualMemory
RtlAllocateHeap
NtReadVirtualMemory
NtDuplicateObject
RtlSubAuthoritySid
EtwSendNotification
RtlLengthRequiredSid
RtlInitializeSid
RtlAdjustPrivilege
RtlInitString
NtAllocateLocallyUniqueId

ole32

CoTaskMemFree
StringFromGUID2
CoInitializeSecurity
CoInitializeEx
CoTaskMemAlloc
CoUninitialize

dwmapi

DwmIsCompositionEnabled

msimg32

AlphaBlend

wmsgapi

WmsgSendMessage

wtsapi32

WTSQuerySessionInformationW
WTSFreeMemory

winmm

PlaySoundW

userenv

UnloadUserProfile
LoadUserProfileW

winsta

WinStationQueryInformationW

msctfmonitor

UninitLocalMsCtfMonitor
InitLocalMsCtfMonitor

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3e411b26227544071875ec8ea2349f5f

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

ntdll

ole32

dwmapi

msimg32

wmsgapi

wtsapi32

winmm

userenv

winsta

msctfmonitor

Sections

.text Size: 26KB - Virtual size: 26KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 49KB - Virtual size: 49KB

.reloc Size: 28KB - Virtual size: 29KB

.text
Size: 26KB - Virtual size: 26KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 49KB - Virtual size: 49KB

.reloc
Size: 28KB - Virtual size: 29KB