a756d4a2b3c10a4a5e20f9c564939e677865c15614ccf9080371640b64488fa5

Sharing

Copy URL

Twitter E-mail

General

Target

a756d4a2b3c10a4a5e20f9c564939e677865c15614ccf9080371640b64488fa5
Size

442KB
MD5

11f6c092458dde932d8f42840a47a501
SHA1

f84e8cefd194850b14193fa09c83d6cfbad8b94d
SHA256

a756d4a2b3c10a4a5e20f9c564939e677865c15614ccf9080371640b64488fa5
SHA512

285e4e81684509aba2de5f7c27c94658644636efa9995db569b3f2f7d516acf594d8aa18cf3d1fbe122c426bf27138e59486dab4303645e00cf7809be0c7cb23
SSDEEP

6144:GESQdtRrH8+qbavdj2jJSVkh+x3840aCOusOkTBksi3Kjqccgg224:GES8HpqevJ2jCkhqFC5MWsqbf4

Score

N/A

Malware Config

Signatures

Files

a756d4a2b3c10a4a5e20f9c564939e677865c15614ccf9080371640b64488fa5
.exe windows x86

8e24e613f052268bddc9d13029d7afe7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExW
RegCreateKeyExW
DeregisterEventSource
ReportEventW
RegisterEventSourceW
FreeSid
CheckTokenMembership
DuplicateToken
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
CreateProcessAsUserW
DuplicateTokenEx
RevertToSelf
ImpersonateLoggedOnUser
RegQueryInfoKeyW
RegEnumValueW
OpenThreadToken
GetLengthSid
CopySid
LookupAccountNameW
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA

kernel32

SetEndOfFile
CreateMutexW
GetLocalTime
SystemTimeToFileTime
GetSystemDirectoryW
CreateEventW
ResetEvent
Sleep
CreateProcessW
LoadLibraryW
VirtualProtect
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
DeviceIoControl
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
ReleaseMutex
GetComputerNameW
CompareFileTime
TryEnterCriticalSection
GetExitCodeProcess
GetCurrentProcess
GetProcessHeap
DeleteFileA
MoveFileA
LocalAlloc
GetTempPathA
GetCurrentDirectoryW
CreateMutexA
HeapAlloc
GetVersion
HeapFree
GetSystemDirectoryA
FindFirstFileA
ReadProcessMemory
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
WTSGetActiveConsoleSessionId
GetCurrentProcessId
ProcessIdToSessionId
CompareStringW
RemoveDirectoryW
DeleteFileW
MoveFileExW
FindFirstFileW
CopyFileW
FindNextFileW
FindClose
CreateDirectoryW
GetFileAttributesW
SetFileAttributesW
LocalFree
GetModuleFileNameW
FormatMessageW
CreateThread
CreateFileW
GetFileSize
ReadFile
WaitForMultipleObjects
GetLastError
GetModuleHandleW
OpenEventW
SetEvent
CloseHandle
GetVersionExA
GetStartupInfoW
RtlUnwind
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapSize
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
FreeLibrary
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetUserDefaultLCID

gdi32

StartPage
StartDocA
SetMapMode
GetDeviceCaps
GetStockObject
SetBkMode
SetTextColor
CreateFontA
GetTextFaceA
GetTextMetricsW
SelectObject
DeleteObject
CreateSolidBrush
EndDoc
EndPage
DeleteDC

user32

GetParent
ShowWindow
GetDlgItem
SetTimer
DrawMenuBar
PostMessageW
GetSystemMenu
EnableWindow
SetWindowTextW
SendMessageW
KillTimer
LoadStringW
SetWindowLongW
EnableMenuItem
CheckDlgButton
GetDesktopWindow
LoadStringA
GetSysColor
MessageBoxW
GetDC
GetClientRect
MapWindowPoints
MoveWindow
ReleaseDC
GetWindowLongW
GetDlgCtrlID
SetCursor
CallWindowProcW
FillRect
DrawTextW
DrawFocusRect
LoadCursorW
DestroyCursor
SetDlgItemTextA
IsWindow
IsDlgButtonChecked
SetDlgItemTextW
GetWindowRect
GetSystemMetrics
SetWindowPos

ole32

CoCreateInstance
CoUninitialize
CoSetProxyBlanket
CoInitialize
CoCreateGuid
StringFromGUID2
CLSIDFromProgID

comdlg32

CommDlgExtendedError
PrintDlgA

comctl32

PropertySheetW
CreatePropertySheetPageW

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

wtsapi32

WTSQueryUserToken
WTSEnumerateSessionsW
WTSFreeMemory

crypt32

CryptUnprotectData

shell32

ShellExecuteA

oleaut32

SysAllocString
VariantClear
VariantInit
SysAllocStringByteLen
SysStringLen
SysAllocStringLen
SysFreeString

Sections

.text
Size: 362KB - Virtual size: 362KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e24e613f052268bddc9d13029d7afe7

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

ole32

comdlg32

comctl32

userenv

version

wtsapi32

crypt32

shell32

oleaut32

Sections

.text Size: 362KB - Virtual size: 362KB

.data Size: 30KB - Virtual size: 48KB

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 26KB - Virtual size: 25KB

.text
Size: 362KB - Virtual size: 362KB

.data
Size: 30KB - Virtual size: 48KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 26KB - Virtual size: 25KB