c4e908d9cf04f1d4fa5e5160c400f554962a9294f8a4f4ce0f4f8082c5094090

Sharing

Copy URL

Twitter E-mail

General

Target

c4e908d9cf04f1d4fa5e5160c400f554962a9294f8a4f4ce0f4f8082c5094090
Size

93KB
MD5

04ebbee493174e10e462f2cec1ab6bc4
SHA1

41a52ceed5c5c1a4f07be749b2231386c88761fb
SHA256

c4e908d9cf04f1d4fa5e5160c400f554962a9294f8a4f4ce0f4f8082c5094090
SHA512

faaf16b0f2424de21a38352700a3dbe5f9a731da5322fea1d9239848d549419ca5feb76ace7d3bd46841555149f43737917a49f4a89729c736ae5ba8f592b245
SSDEEP

1536:M1dqWCL/V90P1U3f/k/w366h5Cj2JbuekZqnijXg85d03lPfTgkL5mllFn4V8DxP:zW+MyINv03lnTgGgD4Voxqfx0

Score

N/A

Malware Config

Signatures

Files

c4e908d9cf04f1d4fa5e5160c400f554962a9294f8a4f4ce0f4f8082c5094090
.exe windows x86

9f06d1ff01f8d74c01d824c300c2e2f0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LookupAccountSidW
GetTokenInformation
OpenThreadToken
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegQueryInfoKeyW
AddAce
GetAce
GetAclInformation
AddAccessAllowedAce
InitializeAcl
GetLengthSid
IsValidSid
RegEnumKeyExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
LookupAccountNameW
GetSecurityDescriptorDacl
CopySid
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
OpenProcessToken
CreateWellKnownSid

kernel32

InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
LoadLibraryW
GetProcAddress
GetModuleHandleW
lstrcmpiW
CreateThread
CreateEventW
GetModuleFileNameW
ExitThread
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
RaiseException
OpenEventW
WaitForMultipleObjects
SetProcessShutdownParameters
RegisterApplicationRestart
ApplicationRecoveryFinished
GetCommandLineW
SetEnvironmentVariableW
GetEnvironmentVariableW
HeapSetInformation
GetLocalTime
OutputDebugStringW
OutputDebugStringA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
EncodeSystemPointer
InterlockedExchange
GetVersionExA
lstrlenW
GetCurrentThread
GetLastError
WaitForSingleObject
InterlockedDecrement
CloseHandle
SetEvent
HeapAlloc
GetProcessHeap
HeapFree
LoadLibraryExW

user32

PostThreadMessageW
GetMessageW
PeekMessageW
MsgWaitForMultipleObjectsEx
TranslateMessage
UnregisterClassA
CharNextW
DispatchMessageW

msvcrt

_unlock
_errno
__dllonexit
_lock
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_wcsnicmp
memset
_wcsicmp
_purecall
wcscat_s
wcsncpy_s
wcscpy_s
memcpy_s
free
malloc
_onexit
?terminate@@YAXXZ
_controlfp
fputws
fflush
realloc
_vsnwprintf
_wcmdln

ole32

CoResumeClassObjects
CoInitializeEx
CoUninitialize
StringFromGUID2
CoAddRefServerProcess
CoTaskMemFree
CoRegisterClassObject
CoRevokeClassObject
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoImpersonateClient
CoRevertToSelf
CoReleaseServerProcess
CoInitializeSecurity

oleaut32

SysFreeString
SafeArrayDestroy
SafeArrayUnlock
SafeArrayGetUBound
SafeArrayGetLBound
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
VariantClear
VariantInit
SysStringLen

mscoree

CorBindToRuntimeEx

Exports

Exports

QueryUser
ehRecLock
ehRecUnLock

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ycvmlao
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9f06d1ff01f8d74c01d824c300c2e2f0

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

msvcrt

ole32

oleaut32

mscoree

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 56KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 29KB - Virtual size: 30KB

ycvmlao Size: - Virtual size: 4KB

.text
Size: 56KB - Virtual size: 56KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 29KB - Virtual size: 30KB

ycvmlao
Size: - Virtual size: 4KB