2b488c75a86bce695adba90977f129523e4df329a2d734356058c8af4486a3d8

Sharing

Copy URL Twitter E-mail

General

Target

2b488c75a86bce695adba90977f129523e4df329a2d734356058c8af4486a3d8
Size

276KB
MD5

4681266df423cbd696b07744a07b57a0
SHA1

ba2f192e70f2ca56e08f1d68204c6856c7076301
SHA256

2b488c75a86bce695adba90977f129523e4df329a2d734356058c8af4486a3d8
SHA512

ebad38b3c05a34770357641d603656434c6d74c71a39570ebebfac597551171d5081c7d5dce333444c9e9b0538d200aa778133eb07d01d8440fa4fc1d2394683
SSDEEP

6144:1DlyHF62gG4TPHd90jeSvW4Fe4bcqirfxdC+8Y:1DAHE2f4TF9b+3Yqq8Y

Score

N/A

Malware Config

Signatures

Files

2b488c75a86bce695adba90977f129523e4df329a2d734356058c8af4486a3d8
.exe windows x86

00cd548e737db4ec775076cb285a1bd6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadDirectoryChangesW
CreateDirectoryExA
CompareStringA
UnmapViewOfFile
ReadConsoleInputW
PrepareTape
AreFileApisANSI
VirtualQueryEx
LeaveCriticalSection
EnumCalendarInfoW
EnumResourceNamesW
SystemTimeToFileTime
VirtualFree
ExitProcess
MoveFileW
GlobalFindAtomA
WriteProcessMemory
SetThreadLocale
GlobalFree
SetConsoleCursorPosition
IsBadStringPtrA
GetOverlappedResult
CreateNamedPipeW
LocalReAlloc
EnumResourceNamesA
OutputDebugStringA
GlobalDeleteAtom
SetCommTimeouts
EnumCalendarInfoA
GetUserDefaultLangID
GetVolumeInformationW
OpenFile
FlushConsoleInputBuffer
FindNextChangeNotification
RemoveDirectoryW
WaitNamedPipeA
GetModuleHandleA
DeleteCriticalSection
GetLargestConsoleWindowSize
GetLogicalDriveStringsA
GetNumberFormatW
CreateDirectoryA
WritePrivateProfileStringW
DuplicateHandle
GetStartupInfoA
SetEnvironmentVariableA
CreateMutexA
GetUserDefaultLCID
GlobalReAlloc
Beep
VirtualQuery
QueryDosDeviceA
SetConsoleMode
GetCommState
WritePrivateProfileStringA
OpenMutexA
SetLastError
SetThreadPriorityBoost
GetSystemInfo
GetThreadPriority
_hread
GetTapeStatus
IsBadReadPtr
GetFullPathNameA
LocalAlloc
FillConsoleOutputCharacterA
SetStdHandle
GetSystemDefaultLangID
PeekConsoleInputW
CopyFileExW
GetShortPathNameA
GlobalFlags
GetTempFileNameA
IsDBCSLeadByteEx
GetWindowsDirectoryA
FlushFileBuffers
WriteFile
ClearCommBreak
lstrlenA
GetBinaryTypeA
VirtualAlloc

user32

RedrawWindow
AdjustWindowRect
EnumWindowStationsW
GetWindowContextHelpId
OemToCharBuffW
GetTabbedTextExtentA
MessageBoxExA
IsDlgButtonChecked
GetUpdateRgn
SetClipboardData
ChildWindowFromPointEx
ShowWindow
ChangeDisplaySettingsW
PeekMessageW
GetMenuCheckMarkDimensions
GetSysColor
GetWindow
GetClipboardOwner

gdi32

GetStockObject
CreateMetaFileW
SetBkMode
CreateEllipticRgn
GetNearestColor
GetNearestPaletteIndex
ResizePalette
CreatePenIndirect
GetTextCharacterExtra
EndDoc
CreateMetaFileA
SetBitmapBits
FillRgn
CopyEnhMetaFileW
DescribePixelFormat
SelectObject

comdlg32

GetFileTitleW
PrintDlgW
ReplaceTextA

advapi32

RegSetValueExW
UnlockServiceDatabase
SetEntriesInAclW
GetSidSubAuthorityCount
MakeAbsoluteSD
InitializeAcl
RegFlushKey
CryptReleaseContext
AllocateLocallyUniqueId
ObjectCloseAuditAlarmA
GetAce
GetPrivateObjectSecurity
RegCreateKeyExW
LookupPrivilegeNameA
RegSetValueW
ReportEventW
LookupAccountSidW
DeleteAce
CryptEncrypt
SetSecurityDescriptorDacl
RegGetKeySecurity
InitializeSecurityDescriptor
RegEnumKeyExW
CryptGetUserKey
NotifyChangeEventLog
AbortSystemShutdownA
DuplicateTokenEx
AbortSystemShutdownW
BuildSecurityDescriptorW
SetServiceObjectSecurity
PrivilegeCheck
ObjectDeleteAuditAlarmW
GetServiceKeyNameW

shell32

SHGetSettings
SHBrowseForFolderA
SHGetPathFromIDListA

ole32

CoTaskMemRealloc
StringFromGUID2
MkParseDisplayName

oleaut32

VariantChangeType
SafeArrayPutElement

shlwapi

PathIsRelativeA
PathRemoveFileSpecW
StrRChrA
PathIsRootW
PathFileExistsA
SHRegOpenUSKeyW
wnsprintfA
UrlApplySchemeW
SHAutoComplete

msvcrt

_controlfp
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__p__fmode
__set_app_type
_except_handler3
__p__commode

Sections

.text
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

00cd548e737db4ec775076cb285a1bd6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

msvcrt

Sections

.text Size: 240KB - Virtual size: 236KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 24KB - Virtual size: 23KB

.text
Size: 240KB - Virtual size: 236KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 24KB - Virtual size: 23KB