a5ca96cdfad0f36f1f39a3912217248cb03d30f3f7147f23d1e4ae20d979b27d

Sharing

Copy URL Twitter E-mail

General

Target

a5ca96cdfad0f36f1f39a3912217248cb03d30f3f7147f23d1e4ae20d979b27d
Size

441KB
MD5

5c884611e698cbe064c356956378e40b
SHA1

a98f5ac4b02d6668a81e6a371a3df781686aa533
SHA256

a5ca96cdfad0f36f1f39a3912217248cb03d30f3f7147f23d1e4ae20d979b27d
SHA512

345679826b4a53f94fd73476df242bcf7ae3a72e75a4dccdea0cd8381e586ba0c86027ccd1607f8de06fc8224afcbc4f86dccf9233aefbe4027dabdda7667906
SSDEEP

6144:1T5aRqhL3mW0Idrge6Ej4/0WQATR/wAGrf/9/R2fv7cV7++Jb4MGmzFG0HYD1:1cRU7imA4D7gvu7ieOD1

Score

N/A

Malware Config

Signatures

Files

a5ca96cdfad0f36f1f39a3912217248cb03d30f3f7147f23d1e4ae20d979b27d
.dll windows x86

ace0997a71584f63019f6cf265f9f37b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

WOWShellExecute
SHGetFolderPathW
SHGetDiskFreeSpaceA
DragQueryFileA

msvcrt

__p___wargv
__getmainargs
__p__amblksiz
__CxxFrameHandler
_XcptFilter
_CIexp
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_onexit
_scalb
_setmbcp
_strnicmp
_strupr
exit
exp
getchar
sprintf
sqrt
strcspn
strncpy
strstr
__dllonexit

kernel32

ReadFile
SetLastError
SetTapePosition
LoadModule
QueryPerformanceCounter
lstrlenA
WaitForSingleObject
VirtualAlloc
VerSetConditionMask
UnhandledExceptionFilter
TerminateProcess
Sleep
CloseHandle
ContinueDebugEvent
CopyFileA
CreateProcessA
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommConfig
GetCommState
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFullPathNameA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessPriorityBoost
GetStartupInfoA
GetSystemDirectoryA
GetTickCount
GetVersionExA
GetWindowsDirectoryA
Heap32First
LoadLibraryA
LocalFileTimeToFileTime
SetUnhandledExceptionFilter

advapi32

OpenServiceA
AllocateAndInitializeSid
ControlService
CryptGetUserKey
DestroyPrivateObjectSecurity
SystemFunction030
SystemFunction001
SetThreadToken
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
QueryServiceStatus
AddAuditAccessAceEx
OpenProcessToken
NotifyBootConfigStatus
LsaGetSystemAccessAccount
LsaCreateTrustedDomain
LookupPrivilegeValueA
GetTokenInformation
GetSidLengthRequired
GetSidIdentifierAuthority
EqualSid

user32

ShowScrollBar
SetThreadDesktop
SetForegroundWindow
SendMessageA
ScrollWindowEx
PtInRect
PostMessageA
PeekMessageA
MessageBoxA
LoadIconA
IsWindow
GetWindowRect
FrameRect
FillRect
ExitWindowsEx
ExcludeUpdateRgn
EnumWindows
EnumThreadWindows
EnableWindow
DrawIcon
DispatchMessageA
CheckRadioButton
BlockInput
AdjustWindowRect
TranslateMessage

Exports

Exports

GetBuffer
Int_AsLong
RuntimeWarning
SetEncodingAndErrors
free_default

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 207KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ace0997a71584f63019f6cf265f9f37b

Headers

File Characteristics

Imports

shell32

msvcrt

kernel32

advapi32

user32

Exports

Exports

Sections

.text Size: 103KB - Virtual size: 103KB

.rdata Size: 207KB - Virtual size: 206KB

.data Size: 107KB - Virtual size: 107KB

.rsrc Size: 18KB - Virtual size: 17KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 103KB - Virtual size: 103KB

.rdata
Size: 207KB - Virtual size: 206KB

.data
Size: 107KB - Virtual size: 107KB

.rsrc
Size: 18KB - Virtual size: 17KB

.reloc
Size: 4KB - Virtual size: 3KB