7e38e704dfe9344096ce54fe3ff54793d44dbbe258b01a6b77283d547a668251

Sharing

Copy URL Twitter E-mail

General

Target

7e38e704dfe9344096ce54fe3ff54793d44dbbe258b01a6b77283d547a668251
Size

722KB
MD5

7c3f34d3437ba0b6f470af24d6dab830
SHA1

fc1e10274132042e9c0e196fe296437e74bfb886
SHA256

7e38e704dfe9344096ce54fe3ff54793d44dbbe258b01a6b77283d547a668251
SHA512

7fdeb5562cf3f14d06abd4499e23fd90748512753064397bb7b0670cb4548b09eb310cb94b68d441da79097ea915c8dc5dadfe28f3d1ea36122b8dcd841f20a9
SSDEEP

12288:MiA+ZQLBRr2nG4S0EnoqIo5GuE0umg62agsZfpJ75eQa12Jeit2qz54onKUR2hsn:ZAEKRr29gIwR5umg62/we/cJP2QqoKsr

Score

N/A

Malware Config

Signatures

Files

7e38e704dfe9344096ce54fe3ff54793d44dbbe258b01a6b77283d547a668251
.exe windows x86

93472e0311d63fa477da7e03bc0a2b1f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

AbortSystemShutdownA
LogonUserW
CryptAcquireContextA
QueryUsersOnEncryptedFile
WmiDevInstToInstanceNameW
GetSidSubAuthority
RegQueryInfoKeyW
LsaClose
SetSecurityDescriptorGroup
QueryServiceConfig2W
SetSecurityInfo
LsaLookupSids
EnumServicesStatusExA
ConvertStringSecurityDescriptorToSecurityDescriptorA
CryptEncrypt
RegOpenKeyExW
AddAccessDeniedAce
CryptAcquireContextW
AllocateLocallyUniqueId
ConvertStringSidToSidW
ClearEventLogW
RegQueryMultipleValuesA
RegOpenKeyW
RegSetValueExA

shell32

SHGetIconOverlayIndexW
SHInvokePrinterCommandW
SHGetDataFromIDListW
SHAppBarMessage
SHGetPathFromIDListW
ExtractIconExW
SHCreateDirectoryExW
ExtractAssociatedIconW
FindExecutableA
DragAcceptFiles
ShellExecuteW
DragQueryFileA
ShellExecuteExW
SHGetPathFromIDListA
SHGetSettings
SHGetFolderPathW
SHFileOperationW
ShellExecuteA
SHGetFolderLocation
Shell_NotifyIconA
SHGetMalloc
SHSetLocalizedName
ExtractAssociatedIconExW
SHBrowseForFolderW
CommandLineToArgvW
SHGetInstanceExplorer
SHGetDesktopFolder
SHGetSpecialFolderPathW
ShellExecuteExA

cfgmgr32

CM_Get_Class_Name_ExW
CM_Get_Parent_Ex
CM_Free_Log_Conf_Handle
CM_Get_First_Log_Conf_Ex
CM_Get_DevNode_Status_Ex
CM_Get_DevNode_Registry_Property_ExW
CM_Locate_DevNode_ExW
CM_Get_Next_Res_Des_Ex
CM_Open_Class_Key_ExW
CM_Get_Res_Des_Data_Ex
CM_Free_Res_Des_Handle
CM_Get_Device_ID_ExW

kernel32

GetConsoleWindow
WriteProfileStringW
CopyFileA
GetPrivateProfileSectionNamesA
TerminateProcess
VirtualAlloc
GlobalGetAtomNameW
GetPrivateProfileSectionNamesW
InterlockedDecrement
LoadLibraryExW
GlobalSize
MoveFileWithProgressW
lstrcatW
MulDiv
GetStdHandle
FindNextChangeNotification
CopyFileExW
AssignProcessToJobObject
SetWaitableTimer
GlobalMemoryStatusEx
CreateFileMappingW
CreateEventA
EndUpdateResourceW

odbc32

ValidateErrorQueue
SearchStatusCode
PostODBCError
CursorLibLockStmt
CursorLibTransact
CursorLibLockDesc
PostODBCComponentError
VFreeErrors
CursorLibLockDbc
SQLDriversA
VRetrieveDriverErrorsRowCol
LockHandle

netapi32

NetServiceControl
NetLocalGroupDel
DsEnumerateDomainTrustsW
NetUserAdd
NetGroupSetInfo
NetWkstaUserGetInfo
NetServerTransportEnum
NetUserSetInfo
NetServerEnum
DsGetDcNameW
NetAlertRaiseEx
NetUserDel
NetValidateName
NetShareGetInfo
NetServerDiskEnum
NetGroupGetInfo
NetQueryDisplayInformation
NetSessionEnum
NetFileEnum
NetpwPathType
NetUserModalsSet
NetApiBufferAllocate
Netbios
NetDfsSetClientInfo
NetLocalGroupAddMembers
NetUserModalsGet

Sections

.edata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 26KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 124KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 240KB - Virtual size: 413KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 276KB - Virtual size: 306KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 306B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93472e0311d63fa477da7e03bc0a2b1f

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

shell32

cfgmgr32

kernel32

odbc32

netapi32

Sections

.edata Size: 4KB - Virtual size: 3KB

.edata Size: 6KB - Virtual size: 5KB

.text Size: 26KB - Virtual size: 344KB

.idata Size: 124KB - Virtual size: 238KB

DATA Size: 240KB - Virtual size: 413KB

.edata Size: 276KB - Virtual size: 306KB

.rsrc Size: 44KB - Virtual size: 43KB

.reloc Size: 1024B - Virtual size: 306B

.edata
Size: 4KB - Virtual size: 3KB

.edata
Size: 6KB - Virtual size: 5KB

.text
Size: 26KB - Virtual size: 344KB

.idata
Size: 124KB - Virtual size: 238KB

DATA
Size: 240KB - Virtual size: 413KB

.edata
Size: 276KB - Virtual size: 306KB

.rsrc
Size: 44KB - Virtual size: 43KB

.reloc
Size: 1024B - Virtual size: 306B