3a197717d0f822eeb44dccbc40851e366edd991a658424fc2bb346086738d9f9

Sharing

Copy URL Twitter E-mail

General

Target

3a197717d0f822eeb44dccbc40851e366edd991a658424fc2bb346086738d9f9
Size

105KB
MD5

64e31c101223455b6976f3bb127bf5d1
SHA1

9829e48dac3278900270c8c7c6a54c0d02914294
SHA256

3a197717d0f822eeb44dccbc40851e366edd991a658424fc2bb346086738d9f9
SHA512

a8ca455e9998f6aae5714d838ef02734f682cc5470a4965f5a783f607c48ff909d3356f277450aa2b7b967c9105b91eb6ff1643b6ccc383756262916e262fd91
SSDEEP

3072:N5obAHsgaYDVSt7RDGysc9Cks6Ir9GV4psSF:N5XY7RDH9eVr9q8P

Score

N/A

Malware Config

Signatures

Files

3a197717d0f822eeb44dccbc40851e366edd991a658424fc2bb346086738d9f9
.exe windows x86

a809aac54b1a2c735f0ed862cf374c05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wtsapi32

WTSRegisterSessionNotification
WTSUnRegisterSessionNotification

uxtheme

GetThemeColor
OpenThemeData
CloseThemeData
GetThemeFont

gdi32

SetBkColor
CreateSolidBrush
SetTextColor
CreateFontIndirectW
DeleteObject

shell32

CommandLineToArgvW
ShellExecuteExW

kernel32

GetTickCount
CloseHandle
GlobalAlloc
GetLastError
CreateThread
TerminateProcess
WideCharToMultiByte
GetCurrentProcess
InterlockedIncrement
InitializeCriticalSection
GetProcessVersion
LocalFree
EnterCriticalSection
GetModuleHandleA
ExitProcess
GetCurrentProcessId
SetUnhandledExceptionFilter
QueryPerformanceCounter
WaitForSingleObject
FindResourceW
GetStartupInfoW
LocalAlloc
InterlockedDecrement
GetSystemTimeAsFileTime
LoadResource
InterlockedCompareExchange
FreeResource
GetCurrentThreadId
LockResource
UnhandledExceptionFilter
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
Sleep

advapi32

RegOpenKeyExW
GetTraceLoggerHandle
RegCreateKeyW
RegCreateKeyExW
UnregisterTraceGuids
RegCloseKey
RegSetValueExW
GetTraceEnableFlags
RegisterTraceGuidsW
RegQueryValueExW
GetTraceEnableLevel
TraceMessage

ole32

CoTaskMemFree
CoCreateInstance
CoInitializeEx

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsExW

msvcrt

wcstoul
_vsnwprintf
_cexit
?terminate@@YAXXZ
_wcmdln
??2@YAPAXI@Z
__set_app_type
__p__commode
__wgetmainargs
memset
??3@YAXPAX@Z
__setusermatherr
_exit
_initterm
exit
_wcsicmp
_XcptFilter
__p__fmode
_amsg_exit
_controlfp

user32

DispatchMessageW
SetWindowTextW
SetActiveWindow
SetDlgItemTextW
SendMessageW
RegisterClassExW
GetMessageW
FindWindowW
LoadIconW
IsDlgButtonChecked
UnregisterClassW
CreateWindowExW
GetDlgItem
SetTimer
UnregisterDeviceNotification
GetParent
DialogBoxParamW
EnableWindow
GetSysColor
CheckDlgButton
DestroyWindow
PostQuitMessage
SetWindowLongW
GetWindowLongW
PostMessageW
SetFocus
GetSysColorBrush
ShowWindow
LoadStringW
GetWindowTextW
SendDlgItemMessageW
DefWindowProcW
RegisterDeviceNotificationW
EndDialog
TranslateMessage
FindWindowExW
GetDlgCtrlID
SetForegroundWindow
GetWindowTextLengthW
KillTimer

crypt32

CryptEncodeObjectEx
CertEnumSystemStoreLocation
CryptEncodeObject

powrprof

CallNtPowerInformation

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a809aac54b1a2c735f0ed862cf374c05

Headers

File Characteristics

Imports

wtsapi32

uxtheme

gdi32

shell32

kernel32

advapi32

ole32

setupapi

msvcrt

user32

crypt32

powrprof

Sections

.text Size: 69KB - Virtual size: 69KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 29KB - Virtual size: 29KB

.rsrc Size: 1024B - Virtual size: 80KB

.text
Size: 69KB - Virtual size: 69KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 29KB - Virtual size: 29KB

.rsrc
Size: 1024B - Virtual size: 80KB