f9a5b72db66f85a6afd738b7b409e6e984ec9600dbc6728b73eee7e22e1a4967

Sharing

Copy URL

Twitter E-mail

General

Target

f9a5b72db66f85a6afd738b7b409e6e984ec9600dbc6728b73eee7e22e1a4967
Size

304KB
MD5

595d5f67b4eab72c9192152574843280
SHA1

001173d87e598d5d807655caa0f09d56e0fa8661
SHA256

f9a5b72db66f85a6afd738b7b409e6e984ec9600dbc6728b73eee7e22e1a4967
SHA512

f5247d2681619f61a044a8be506a0106ae637d72aa2b3eab37dba5066061d579df113d8627a38cf3b70e5bf58b91ac5187b92d60cdc1c0f67ba911d921907e45
SSDEEP

6144:yNGuiE2rGd1Rm/8sbu4GZ5XbtcYfyebZssoEZSwp7ba:kbRcNbub9BLfFdjp

Score

N/A

Malware Config

Signatures

Files

f9a5b72db66f85a6afd738b7b409e6e984ec9600dbc6728b73eee7e22e1a4967
.exe windows x86

9712f6d7ac120bcf07456e1d506cfe61

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleCreateFromData
OleSetContainedObject
StgOpenStorage
WriteClassStm
CoMarshalInterThreadInterfaceInStream
OleIsCurrentClipboard
CreateFileMoniker
CreateStreamOnHGlobal
ReadClassStg
CoInitializeSecurity

advapi32

GetNamedSecurityInfoW
OpenServiceA
RegDeleteValueA
SetEntriesInAclW
RegSetKeySecurity
CryptHashData
AllocateAndInitializeSid
GetAclInformation
GetSecurityDescriptorOwner
LookupAccountSidA
RegFlushKey
RegSetValueExW
StartServiceW
SetNamedSecurityInfoW
RegEnumKeyExA
ConvertStringSecurityDescriptorToSecurityDescriptorA
RegEnumKeyExW

oleaut32

VariantClear

shell32

SHGetSpecialFolderLocation
SHChangeNotify

kernel32

GlobalDeleteAtom
SystemTimeToTzSpecificLocalTime
OpenFileMappingW
GetVersion
GetPriorityClass
DeleteTimerQueueTimer
GlobalFlags
FindClose
TerminateProcess
GetModuleHandleA
GetStartupInfoA
GetStringTypeExW
FindResourceExW
TerminateThread
EnterCriticalSection
GlobalLock
VirtualAlloc
CopyFileW
GetStringTypeA
LoadLibraryA
DosDateTimeToFileTime
GetPrivateProfileIntA
GetComputerNameW
FindResourceA
GetSystemDirectoryA
GetThreadLocale
GetFileSizeEx
WritePrivateProfileStringA
DeleteFileW
GetProcessAffinityMask
GetModuleHandleW
HeapDestroy
OpenEventA
OutputDebugStringA
EnumSystemLocalesA
ExpandEnvironmentStringsA
SetEvent
SetEndOfFile
DebugBreak
FlushInstructionCache
GetLogicalDriveStringsW
SetFilePointer
TlsAlloc
lstrcmpiA
CreateIoCompletionPort
GetUserDefaultLangID
SetWaitableTimer
ConvertDefaultLocale
WritePrivateProfileSectionA
CreateTimerQueue
SetErrorMode
SetCurrentDirectoryA
GlobalAddAtomW
CreateFileA
GetCommandLineA
OpenFileMappingA
OpenEventW

user32

GetMenuItemCount
OemToCharBuffA
InsertMenuItemA
GetKeyNameTextA
CopyRect
SendMessageA
DefWindowProcW
GetDlgItem
IsZoomed
DrawFocusRect
SetCursor
UnregisterClassW
DialogBoxParamW
SetDlgItemInt
SystemParametersInfoW
SetClassLongA
GetDialogBaseUnits
GetClassInfoW
ModifyMenuA
SetWindowWord
PostThreadMessageW
EnumDisplayMonitors
DrawTextW
LoadIconW
GetDlgCtrlID
GetClassInfoA
SetProcessDefaultLayout
CharNextW
GetClassInfoExA
GetKeyboardLayoutList
IsRectEmpty
DrawTextExA
GetActiveWindow
DispatchMessageA
IsDialogMessageA
GetMenuStringW
AdjustWindowRectEx
EndPaint
InflateRect
GetQueueStatus
SetMenuItemInfoA
WindowFromDC
SetRectEmpty
MessageBoxA
SetForegroundWindow
DeferWindowPos
PostMessageW
EmptyClipboard
WindowFromPoint
SetRect
KillTimer
SetCaretPos
GetSysColor
GetMenuCheckMarkDimensions
CharUpperW
SetWindowTextA
GetMessagePos
CreateDialogIndirectParamA
SendMessageW
IsWindowEnabled
CreateWindowExA
CreateMenu
IsChild
PeekMessageW
GetMenuItemInfoW
GetMonitorInfoW
IsDlgButtonChecked
GrayStringW
SetMenu
MapWindowPoints
GetCaretBlinkTime
GetLastActivePopup
UnregisterDeviceNotification
AllowSetForegroundWindow
GetScrollRange

msvcrt

_vsnprintf
_XcptFilter
_acmdln
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
toupper
exit
wcstok
_msize
_wcsnicmp
atof
setlocale
_cexit
isdigit
fread
sprintf
_CxxThrowException
wcstoul
_purecall
_wcsupr
memmove
_initterm
calloc
strncpy
ceil
srand
_snwprintf
_itoa
strstr
atol
wcsncmp
malloc
localtime
wcsspn
strrchr
towupper
_exit
floor
_setmbcp
iswalnum
swscanf
_controlfp
wcscpy
_ecvt
_wtoi64
longjmp

Sections

.text
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9712f6d7ac120bcf07456e1d506cfe61

Headers

File Characteristics

Imports

ole32

advapi32

oleaut32

shell32

kernel32

user32

msvcrt

Sections

.text Size: 220KB - Virtual size: 219KB

.rdata Size: 64KB - Virtual size: 61KB

.data Size: 12KB - Virtual size: 9KB

.rsrc Size: 4KB - Virtual size: 744B

.text
Size: 220KB - Virtual size: 219KB

.rdata
Size: 64KB - Virtual size: 61KB

.data
Size: 12KB - Virtual size: 9KB

.rsrc
Size: 4KB - Virtual size: 744B