c9dd61fcb73b7937b8d7ba979c6424d8561934e61baed6a1837195d60240bc25

Sharing

Copy URL Twitter E-mail

General

Target

c9dd61fcb73b7937b8d7ba979c6424d8561934e61baed6a1837195d60240bc25
Size

208KB
MD5

7c96c2c00ae762953c204a17a5466741
SHA1

0fb04a855d27fbd7d1056cd479a0b7da60c5cd4b
SHA256

c9dd61fcb73b7937b8d7ba979c6424d8561934e61baed6a1837195d60240bc25
SHA512

806873d701cc16632c61e47bfdf3c107cda26dc0b7eea89ed2e38814189cdbb796f968f7d5a8ead42d237c7efdc55f3765ae61354b728458ec8be08c93ae6f5e
SSDEEP

3072:vAdB3a1EPjMgnElNdxRkwjcU5rBhRJgHAwdVy26YvSEAwlGEX+KXo2UhY:vw3a1EPDANdxewjciDS/YlYhlPXfox6

Score

N/A

Malware Config

Signatures

Files

c9dd61fcb73b7937b8d7ba979c6424d8561934e61baed6a1837195d60240bc25
.exe windows x86

28f48d4c6eb56da97dfe67a8900e7709

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmSetOpenStatus
ImmGetContext
ImmGetIMEFileNameA
ImmGetConversionStatus
ImmSetConversionStatus
ImmReleaseContext
ImmCreateContext
ImmAssociateContext
ImmDestroyContext
ImmNotifyIME
ImmIsIME

kernel32

WriteFile
SetFilePointer
CreateFileA
GetLocaleInfoA
GetSystemDirectoryA
DeleteFileA
GetSystemDefaultLCID
GetSystemInfo
RemoveDirectoryA
Sleep
lstrcpyW
lstrlenW
WideCharToMultiByte
lstrcmpA
GetWindowsDirectoryA
lstrcpynA
GetEnvironmentVariableA
CreateDirectoryA
GetPrivateProfileStringA
FlushFileBuffers
GetProcAddress
CompareStringW
SetStdHandle
ReadFile
SetConsoleCtrlHandler
GetTimeZoneInformation
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetCurrentDirectoryA
GetCurrentDirectoryA
GetFullPathNameA
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
TerminateProcess
LCMapStringW
LCMapStringA
HeapFree
ExitProcess
GetVersion
GetStartupInfoA
GetModuleHandleA
FindFirstFileA
InterlockedExchange
GetDriveTypeA
FileTimeToLocalFileTime
GetCurrentThread
GetCurrentProcess
GetLastError
FreeLibrary
LoadLibraryA
GetFileAttributesA
WinExec
lstrcatA
GetTickCount
ReleaseMutex
WaitForSingleObject
UnmapViewOfFile
CloseHandle
CreateMutexA
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
lstrlenA
lstrcpyA
MultiByteToWideChar
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
lstrcmpiA
CompareStringA
GetCommandLineA
SetEnvironmentVariableA
FileTimeToSystemTime
FindClose
HeapAlloc
RtlUnwind
GetCurrentThreadId
SetLastError
GetVersionExA
LocalAlloc
GetModuleFileNameA
GetBinaryTypeA
LocalFree

user32

CharLowerA
LoadKeyboardLayoutA
SystemParametersInfoA
wsprintfA
IsCharAlphaA
GetKeyboardLayoutList
GetDlgItem
SetFocus
wsprintfW
DialogBoxParamA
DialogBoxParamW
FindWindowA
EnumChildWindows
GetDC
wvsprintfA
ReleaseDC
DrawTextW
DrawTextA
GetWindowTextLengthA
GetWindowTextLengthW
GetWindowTextW
GetWindowTextA
SetWindowTextW
SetWindowTextA
MessageBoxW
MessageBoxA
IsDialogMessageW
IsDialogMessageA
DefWindowProcW
DefWindowProcA
CallWindowProcW
CallWindowProcA
GetWindowLongW
GetWindowLongA
SetWindowLongW
SetWindowLongA
DispatchMessageW
DispatchMessageA
PeekMessageW
PeekMessageA
PostMessageW
IsWindowUnicode
SendMessageW
SendMessageA
GetClassNameA
SendMessageTimeoutA
PostMessageA
RegisterWindowMessageA
CharNextA
PostThreadMessageA
EnumWindows
UnloadKeyboardLayout
GetSysColor
GetKeyboardLayout
EndDialog

gdi32

TextOutW
TextOutA

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorA
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
GetSecurityDescriptorDacl
AllocateAndInitializeSid
IsValidSid
FreeSid
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
RegQueryValueExW
RegOpenKeyA
RegCreateKeyExW
RegSetValueExW
GetUserNameA
OpenThreadToken
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
InitializeSecurityDescriptor
RegSetKeySecurity
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
RegFlushKey
LookupPrivilegeValueA
RegOpenKeyExA
RegQueryInfoKeyA
RegCloseKey
RegEnumValueA
RegDeleteValueA
RegSetValueExA
RegEnumKeyExA
RegUnLoadKeyA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc

ole32

CoInitialize
StringFromGUID2
CoTaskMemFree
CoCreateInstance
CoUninitialize

msi

ord81

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

28f48d4c6eb56da97dfe67a8900e7709

Headers

File Characteristics

Imports

imm32

kernel32

user32

gdi32

advapi32

shell32

ole32

msi

Sections

.text Size: 144KB - Virtual size: 140KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 32KB - Virtual size: 42KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 144KB - Virtual size: 140KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 32KB - Virtual size: 42KB

.rsrc
Size: 8KB - Virtual size: 8KB