ac16a9b01fbc5c884b19f8ee5e6a77d24a6ce82a4650fbab689d17ffe0cf8ddd

Sharing

Copy URL Twitter E-mail

General

Target

ac16a9b01fbc5c884b19f8ee5e6a77d24a6ce82a4650fbab689d17ffe0cf8ddd
Size

1022KB
MD5

69dda0435e6943cdc48560f65e775e00
SHA1

386754a5de326f83da7ba64521ec152f855aa17a
SHA256

ac16a9b01fbc5c884b19f8ee5e6a77d24a6ce82a4650fbab689d17ffe0cf8ddd
SHA512

40585ba2ee2e7cd3c11b6ceca7b9cb802ddd4733d9837c5070d4bfa5e4d519adf1eb41f4faba805acd0cc14918fc1746a750bbb6631b120c83406903dbea927e
SSDEEP

12288:yiNTF7cP+H6WA5uYY11WjIYjs3mWvgILI/I0qXxd4xNLn9Kg/zfgFah8/M9:l9Zcu6lUzyq2WvgHqfend/Lg0h7

Score

N/A

Malware Config

Signatures

Files

ac16a9b01fbc5c884b19f8ee5e6a77d24a6ce82a4650fbab689d17ffe0cf8ddd
.exe windows x86

f60c6372b71a7ac1fcbeb437e89b5340

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

LookupPrivilegeValueW
MakeSelfRelativeSD
RegQueryValueExA
GetTraceEnableLevel
LookupAccountSidW
GetSidLengthRequired
InitializeAcl
RevertToSelf
RegOverridePredefKey
EnumServiceGroupW
GetUserNameW
AddAccessDeniedAce
LsaRetrievePrivateData
CryptDestroyKey
RegSetValueExA
ConvertSidToStringSidW
RegCreateKeyExW
GetCurrentHwProfileA
GetSidSubAuthority
LookupAccountNameW
CreateProcessAsUserA
EqualSid
GetLengthSid
SystemFunction029
RegSaveKeyA
ReadEncryptedFileRaw

mscms

GetColorProfileHeader
TranslateBitmapBits
InstallColorProfileW
GetColorDirectoryW
InternalGetPS2PreviewCRD
GetStandardColorSpaceProfileW
InternalGetPS2CSAFromLCS
CreateColorTransformA
EnumColorProfilesW
IsColorProfileValid
CreateColorTransformW
TranslateColors
GetColorDirectoryA
CloseColorProfile
InternalGetPS2ColorRenderingDictionary
OpenColorProfileW
OpenColorProfileA
EnumColorProfilesA
UninstallColorProfileW
GetColorProfileElement
InternalGetPS2ColorSpaceArray
DeleteColorTransform

crypt32

CertAddSerializedElementToStore

winspool.drv

AddPrinterDriverW
DeletePrinter
ReadPrinter
StartDocPrinterW
SetJobW
EnumPrintProcessorsW
GetPrinterDriverW
AddPrintProcessorW
EnumMonitorsW
SetPrinterW
GetPrinterDataExW
PrinterProperties
FreePrinterNotifyInfo
GetPrinterW
EndPagePrinter
DeletePrinterDriverW
GetPrintProcessorDirectoryA
DeleteFormW
AbortPrinter
GetFormW
GetPrintProcessorDirectoryW

imm32

ImmGetConversionStatus
ImmLockIMC
ImmDisableIME
ImmDestroyContext
ImmUnlockIMC
ImmEscapeW
ImmSetOpenStatus
ImmNotifyIME
ImmRequestMessageW
ImmSetCandidateWindow
ImmGetCompositionFontW
ImmGetProperty
ImmEnumRegisterWordW
ImmRegisterWordW
ImmSetCompositionStringW
ImmSetHotKey
ImmCreateContext
ImmGetGuideLineW
ImmGetIMEFileNameA
ImmGetIMCCSize
ImmSetCompositionFontW
ImmGetIMEFileNameW
ImmLockIMCC
ImmAssociateContext
ImmGetImeMenuItemsW
ImmGetHotKey
ImmReleaseContext
ImmGetCandidateListW
ImmIsIME
ImmUnlockIMCC
ImmGetCompositionStringW
ImmConfigureIMEW

msvcrt

_wcsdup
wcsncpy
iswpunct
system
_gcvt
_wmakepath
floor
_CIasin
_msize
_CIsin
div
tan
_lseeki64
fopen
_getpid

user32

SetClassLongW
ReuseDDElParam
EnumWindows
GetFocus
GetDlgItemInt
SetFocus
CreateWindowExW
SetMenuContextHelpId
EnumDisplayDevicesA
LoadAcceleratorsA
SubtractRect
ChangeClipboardChain
PeekMessageA
GetClipboardViewer
GetMenuItemInfoA
CharNextW
IsWindowEnabled
DrawCaptionTempW

kernel32

GetFileAttributesW
GetLogicalDriveStringsA
GetWindowsDirectoryA
GetProfileSectionA
_lcreat
InterlockedIncrement
SetFileApisToOEM
OpenWaitableTimerA
LocalAlloc
VirtualAllocEx
_lread
WaitForMultipleObjects
ProcessIdToSessionId
GetPrivateProfileStructA
GetDateFormatA
DeleteCriticalSection
SetCommState
GetCurrencyFormatW
Sleep
GetCurrentProcess
ExpandEnvironmentStringsA
SignalObjectAndWait
WritePrivateProfileSectionA
GetCommandLineW
GetProcessVersion
Toolhelp32ReadProcessMemory
CompareStringW
OutputDebugStringW
FormatMessageW
GetModuleFileNameW
CreateJobObjectW
DuplicateHandle
SetFilePointer
BindIoCompletionCallback
WritePrivateProfileStringW
VirtualAlloc
LockFile
GetLastError
DisconnectNamedPipe
CopyFileExW
GetCommProperties
HeapReAlloc

Sections

CODE
Size: 97KB - Virtual size: 537KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 383KB - Virtual size: 815KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 395KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f60c6372b71a7ac1fcbeb437e89b5340

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

mscms

crypt32

winspool.drv

imm32

msvcrt

user32

kernel32

Sections

CODE Size: 97KB - Virtual size: 537KB

.data Size: 383KB - Virtual size: 815KB

.rdata Size: 395KB - Virtual size: 402KB

.rsrc Size: 144KB - Virtual size: 144KB

.reloc Size: 1KB - Virtual size: 1KB

CODE
Size: 97KB - Virtual size: 537KB

.data
Size: 383KB - Virtual size: 815KB

.rdata
Size: 395KB - Virtual size: 402KB

.rsrc
Size: 144KB - Virtual size: 144KB

.reloc
Size: 1KB - Virtual size: 1KB