c437d1430d9b496281addb014246f89f80346253377b783e0edf0d3f52a04563

Sharing

Copy URL Twitter E-mail

General

Target

c437d1430d9b496281addb014246f89f80346253377b783e0edf0d3f52a04563
Size

237KB
MD5

1be9a1a5b8723a809f82bae7298ce87e
SHA1

35bfad4bf18ead7e393dc8ccbbcb0d2447fb5512
SHA256

c437d1430d9b496281addb014246f89f80346253377b783e0edf0d3f52a04563
SHA512

39c09e00c2edf6b8db3e60f916f759f805560e501915dc75158877932051a0a6baba7d87d22d9125f319f8012076e07cb6970a41b1d651c15fdf7ddb1fcf81f2
SSDEEP

6144:CKjo76YeKkL4/KycPnOcF9oAO1PBcJvu30CwPq9Ky1:CK07GKkL4/KyPC9iYGIqQ0

Score

N/A

Malware Config

Signatures

Files

c437d1430d9b496281addb014246f89f80346253377b783e0edf0d3f52a04563
.exe windows x86

a3d905c82a15cd800fe71c9ca7b88749

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
CM_Locate_DevNode_ExW
CM_Reenumerate_DevNode
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
SetupDiSetClassInstallParamsW
SetupDiCallClassInstaller
SetupDiSetDeviceRegistryPropertyW
SetupDiGetDeviceInstallParamsW
SetupDiGetClassDevsW

wtsapi32

WTSFreeMemory
WTSEnumerateProcessesW

kernel32

HeapReAlloc
GetSystemTimeAsFileTime
GetProcessHeap
HeapFree
HeapSize
HeapValidate
HeapAlloc
IsBadCodePtr
CreateEventW
CreateThread
SetEvent
WaitForSingleObject
TerminateThread
CloseHandle
GetCurrentThreadId
ExitThread
CreateMutexW
ReleaseMutex
lstrlenW
CreateFileW
SetThreadPriority
CancelIo
DisconnectNamedPipe
ReadFile
GetLastError
WaitForMultipleObjects
LoadLibraryW
GetOverlappedResult
WriteFile
PeekNamedPipe
ConnectNamedPipe
GetTickCount
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
GetVersionExW
OpenProcess
TerminateProcess
MultiByteToWideChar
DeviceIoControl
WideCharToMultiByte
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetFileType
SetHandleCount
SetFilePointer
RtlUnwind
LCMapStringW
GetStringTypeW
SetLastError
TlsFree
TlsSetValue
GetConsoleCP
SetEndOfFile
GetConsoleMode
SetStdHandle
FlushFileBuffers
WriteConsoleW
ResetEvent
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
HeapCreate
IsProcessorFeaturePresent
GetModuleFileNameW
GetStdHandle
ExitProcess
GetModuleHandleW
EncodePointer
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RaiseException
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress

user32

RegisterClassExW
DispatchMessageW
GetMessageW
PostQuitMessage
CreateWindowExW
ShowWindow
UnregisterClassW
DefWindowProcW
PostMessageW
CharUpperBuffW
RegisterDeviceNotificationW
UnregisterDeviceNotification
UpdateWindow

advapi32

RegQueryValueExW
RegEnumKeyW
RegQueryInfoKeyW
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
SetSecurityDescriptorDacl
InitializeSecurityDescriptor

shell32

SHGetSpecialFolderPathW

ole32

CLSIDFromString
CoTaskMemAlloc
CoTaskMemFree
StringFromCLSID

oleaut32

VarBstrCat
VarBstrCmp
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocString

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a3d905c82a15cd800fe71c9ca7b88749

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

wtsapi32

kernel32

user32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 112KB - Virtual size: 112KB

.rdata Size: 31KB - Virtual size: 31KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 80KB - Virtual size: 80KB

.text
Size: 112KB - Virtual size: 112KB

.rdata
Size: 31KB - Virtual size: 31KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 80KB - Virtual size: 80KB