9db869eec6e15b020b15ac431feb1c097e317b2c56730d949277d7e950969e11

Sharing

Copy URL Twitter E-mail

General

Target

9db869eec6e15b020b15ac431feb1c097e317b2c56730d949277d7e950969e11
Size

91KB
MD5

6a12bc7b776d2aed85021511f2ea0750
SHA1

f17a9952ccb4266e31248dc01fea9370c196408e
SHA256

9db869eec6e15b020b15ac431feb1c097e317b2c56730d949277d7e950969e11
SHA512

ee31f35fd772c5324122f242cbdc3728dd432b01505189572e704e30420486876597fa22a49a0d9ba0eaa2bfc1520140230ac2c7a0ece7f281f5df29c1cd0201
SSDEEP

1536:LL74RrfhWOGNuUNJael5bGdLVXJqnntoCPcrn9b+:MRrflAuUNJtbGdLGlcr9b+

Score

N/A

Malware Config

Signatures

Files

9db869eec6e15b020b15ac431feb1c097e317b2c56730d949277d7e950969e11
.exe windows x86

38f1bc3584e73dc4affb7a58ae9edaf0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

TraceMessage
OpenProcessToken
RegOpenKeyExW
EventWrite
RegQueryInfoKeyW
RegCloseKey
RegEnumKeyExW
RegDeleteKeyW
ConvertStringSecurityDescriptorToSecurityDescriptorW
LookupPrivilegeValueW
AdjustTokenPrivileges
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
InitiateShutdownW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
UnregisterTraceGuids
EventRegister
EventUnregister
RegEnumValueW

kernel32

GlobalFree
MulDiv
HeapAlloc
GetCurrentProcess
CreateFileW
WriteFile
HeapFree
OpenMutexW
CreateMutexW
GetCurrentThreadId
GetVersionExW
FormatMessageW
GetProcessHeap
HeapSetInformation
RegisterApplicationRestart
GetSystemTime
SystemTimeToFileTime
LoadLibraryA
CloseHandle
CreateEventW
OutputDebugStringA
GetModuleFileNameW
LoadLibraryW
SetLastError
GetLastError
GetFileAttributesW
GetVersion
GetProcAddress
GetModuleHandleW
LocalFree
Sleep
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoA
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetModuleHandleA
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount
UnhandledExceptionFilter
TerminateProcess
DeviceIoControl
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
GetVolumePathNamesForVolumeNameW

gdi32

StartDocW
DeleteObject
AbortDoc
EndDoc
EndPage
StartPage
SelectObject
CreateFontIndirectW
GetDeviceCaps
SetMapMode
SetAbortProc
DeleteDC

user32

EndDialog
SetDlgItemTextW
DialogBoxParamW
LoadStringW
MessageBoxW
SetFocus
TranslateMessage
IsDialogMessageW
DrawTextW
SetCursor
CreateDialogParamW
EnableWindow
ShowWindow
GetDlgItem
PostMessageW
GetParent
DefWindowProcW
EnumThreadWindows
SetWindowPos
SendMessageW
LoadIconW
DestroyWindow
DispatchMessageW
PeekMessageW
SetWindowLongW
GetWindowLongW
CreateWindowExW
LoadCursorW
MsgWaitForMultipleObjects

msvcrt

_ftol2_sse
__CxxFrameHandler3
memcpy
_wcsupr
_wcslwr
??2@YAPAXI@Z
wcsstr
memcmp
_cexit
_vsnwprintf
_except_handler4_common
_controlfp
?terminate@@YAXXZ
_acmdln
_initterm
__setusermatherr
_ismbblead
__p__fmode
memset
_exit
exit
_wcsicmp
__set_app_type
__getmainargs
_amsg_exit
__p__commode
_XcptFilter
??3@YAXPAX@Z

ole32

StringFromGUID2
CoCreateGuid
CoInitializeEx
CoInitialize
CoCreateInstance
CoUninitialize

ntdll

WinSqmAddToStream
WinSqmStartSession
WinSqmEndSession
WinSqmSetDWORD
NtQuerySystemTime

userenv

GetUserProfileDirectoryW

setupapi

SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW

oleaut32

VariantInit
VariantClear
SysFreeString
SysAllocString

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

38f1bc3584e73dc4affb7a58ae9edaf0

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

ole32

ntdll

userenv

setupapi

oleaut32

Sections

.text Size: 47KB - Virtual size: 47KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 7KB - Virtual size: 6KB

.reloc Size: 31KB - Virtual size: 32KB

.text
Size: 47KB - Virtual size: 47KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 31KB - Virtual size: 32KB