40865aa6b201e73681437fb67bd9b7d21f39ea39bf76b81982f6ab0545cfd79f

Sharing

Copy URL

Twitter E-mail

General

Target

40865aa6b201e73681437fb67bd9b7d21f39ea39bf76b81982f6ab0545cfd79f
Size

392KB
MD5

603e5e9b223811d07757a18954c15f76
SHA1

378ed7db1904d1d42ae795ea03d633bf94567305
SHA256

40865aa6b201e73681437fb67bd9b7d21f39ea39bf76b81982f6ab0545cfd79f
SHA512

2a662fd31f0e651a468e39362ac5a8a70bfefddd190fb229f882d1ae6635a9e14c0779fb09b8b3dc2069af058e57aa0d38eea6e05f8949dda287d255aff971d9
SSDEEP

12288:e5T2agBlvwQp4yAtd9GzlCSCmXawrN+MQ:GcIQpXAtdQla04x

Score

N/A

Malware Config

Signatures

Files

40865aa6b201e73681437fb67bd9b7d21f39ea39bf76b81982f6ab0545cfd79f
.exe windows x86

1440cd45cc6d74c7610611158b059063

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellAboutW
ExtractIconW
DragFinish
DragQueryFileW
ExtractAssociatedIconA
ShellExecuteW
DragQueryFileA
DoEnvironmentSubstA

ole32

CoIsOle1Class
CoRegisterPSClsid
OleCreate
CoCopyProxy
OleCreateLinkFromData
OleRegEnumVerbs
OleSetAutoConvert

advapi32

AddAce
LookupPrivilegeNameA
ControlService
DeregisterEventSource
ImpersonateLoggedOnUser
SetSecurityDescriptorControl
RegEnumKeyW
AccessCheckAndAuditAlarmA

kernel32

SetFilePointer
FlushFileBuffers
GetConsoleMode
CloseHandle
GetStringTypeW
MultiByteToWideChar
LCMapStringW
IsProcessorFeaturePresent
WriteConsoleW
SetStdHandle
CreateFileW
GetConsoleCP
DeleteCriticalSection
CreateRemoteThread
GetAtomNameW
GetCommandLineA
WaitCommEvent
LocalLock
CancelDeviceWakeupRequest
HeapQueryInformation
GetLastError
HeapReAlloc
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
HeapFree
HeapAlloc
HeapSetInformation
GetStartupInfoW
HeapCreate
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 169KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 176KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1440cd45cc6d74c7610611158b059063

Headers

DLL Characteristics

File Characteristics

Imports

shell32

ole32

advapi32

kernel32

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 3KB - Virtual size: 69KB

.rsrc Size: 169KB - Virtual size: 172KB

.text Size: 176KB - Virtual size: 180KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 3KB - Virtual size: 69KB

.rsrc
Size: 169KB - Virtual size: 172KB

.text
Size: 176KB - Virtual size: 180KB