31c917de8f1c1b8f4aed02847fed56c0b7302f0da047e56b708adc211b49c553

Sharing

Copy URL Twitter E-mail

General

Target

31c917de8f1c1b8f4aed02847fed56c0b7302f0da047e56b708adc211b49c553
Size

57KB
MD5

5fd93facc41db08533a4c3de4b855d60
SHA1

dab2df62867d7f79bd5d8e92330c8d410078398a
SHA256

31c917de8f1c1b8f4aed02847fed56c0b7302f0da047e56b708adc211b49c553
SHA512

993547bfc93fc53142fe99fa70dd7d5a0ce70b367932d86937d3434d963d7c569f9e6e2bff36db65713166bbf40923df15586ce28e27cfddfe156829f3cc52df
SSDEEP

1536:zvdp7KLDfzjgdRtp7UyAeuF8JyVOJiFt0KyD9YvPUwh:zvdp7KLPjUfp7UnXF8OOJVIvPUw

Score

N/A

Malware Config

Signatures

Files

31c917de8f1c1b8f4aed02847fed56c0b7302f0da047e56b708adc211b49c553
.exe windows x86

1c05fd3bddd06f78ebb6d2c6012886a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_except_handler3
swprintf
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_c_exit
_initterm
__getmainargs
__initenv
exit
_cexit
_XcptFilter
_exit
wcscmp
_wcsicmp
wcslen
??2@YAPAXI@Z
??3@YAXPAX@Z
_strcmpi
_purecall
malloc
iswctype
_wtol
free
_controlfp
realloc

atl

ord32
ord20
ord17
ord23
ord21
ord16

advapi32

MakeSelfRelativeSD
FreeSid
GetSecurityDescriptorLength
MakeAbsoluteSD
AllocateAndInitializeSid
GetSecurityDescriptorDacl
GetSecurityDescriptorSacl
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
SetSecurityDescriptorDacl
EqualSid
DeleteAce
AddAccessAllowedAce
InitializeAcl
AddAccessDeniedAce
GetAclInformation
GetAce
AddAce
LookupAccountNameW
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
GetLengthSid
InitializeSecurityDescriptor
RegSetValueExW
RegCreateKeyExW
InitiateSystemShutdownW
RegisterEventSourceW
ReportEventW
DeregisterEventSource
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
ControlService
CloseServiceHandle
EnumDependentServicesW
OpenServiceW
LookupAccountSidW
GetTokenInformation
QueryServiceStatus
StartServiceW
QueryServiceConfigW
OpenSCManagerW

kernel32

GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
LoadLibraryW
GetProcAddress
FreeLibrary
FormatMessageW
GetVersionExW
LocalAlloc
LocalFree
GetTickCount
GetCurrentProcessId
GetCommandLineW
GetModuleHandleW
GetCurrentThreadId
CreateEventW
CreateThread
SetEvent
InterlockedDecrement
InterlockedIncrement
GetLastError
GetCurrentProcess
CloseHandle
OpenProcess
Sleep
TerminateProcess
WaitForSingleObject
lstrcmpiW
lstrlenW
lstrcpyW
ReadProcessMemory
InitializeCriticalSection
DeleteCriticalSection

user32

wsprintfW
GetMessageW
DispatchMessageW
CharNextW
PostThreadMessageW
wsprintfA
EnumWindows
GetWindowThreadProcessId
GetWindowTextW
PostMessageW

ole32

CoInitializeEx
CoInitializeSecurity
CoUninitialize

oleaut32

LoadRegTypeLi
SetErrorInfo

ntdll

NtQueryInformationProcess

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wumgsfp
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1c05fd3bddd06f78ebb6d2c6012886a3

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

atl

advapi32

kernel32

user32

ole32

oleaut32

ntdll

Sections

.text Size: 20KB - Virtual size: 20KB

.data Size: 512B - Virtual size: 280B

.rsrc Size: 35KB - Virtual size: 36KB

wumgsfp Size: - Virtual size: 4KB

.text
Size: 20KB - Virtual size: 20KB

.data
Size: 512B - Virtual size: 280B

.rsrc
Size: 35KB - Virtual size: 36KB

wumgsfp
Size: - Virtual size: 4KB