c711d14264dbbee3c9df650de67ca697d17994b1233de7df4a7f1eb9448ec165

Sharing

Copy URL Twitter E-mail

General

Target

c711d14264dbbee3c9df650de67ca697d17994b1233de7df4a7f1eb9448ec165
Size

608KB
MD5

12772f4bd78e8a054d6d9ca7da16d450
SHA1

b07fcd7966ef3a0537fff5ff1b45a52036b2de3d
SHA256

c711d14264dbbee3c9df650de67ca697d17994b1233de7df4a7f1eb9448ec165
SHA512

db85f5a48631dc40c8e1d81e9d7396c4109d33bf08a9fbba2f8ac0c9d88c3867d97feb30b1afa2a2987e364c31aa60915d8bf3f94c6e8f22a3e61b83ec138a8c
SSDEEP

12288:COzaRCtb2ExvBiwokaOsC/aUsXbqSkXydzYHNF7eS:PQCHxpiw3aOsh1iyYHNF7n

Score

N/A

Malware Config

Signatures

Files

c711d14264dbbee3c9df650de67ca697d17994b1233de7df4a7f1eb9448ec165
.exe windows x86

8454a101414861b0e7669d888e0d02b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
ConnectNamedPipe
CreateNamedPipeA
GetTickCount
LocalFree
LocalAlloc
OpenFile
GetLocalTime
Beep
GetPrivateProfileStringA
UnmapViewOfFile
OpenFileMappingA
MapViewOfFile
CreateFileMappingA
GetExitCodeThread
QueryPerformanceCounter
DisconnectNamedPipe
SetStdHandle
SetConsoleCtrlHandler
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetCPInfo
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
CreateProcessA
ReadFile
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
RaiseException
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
VirtualQuery
InterlockedExchange
HeapSize
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
IsBadReadPtr
RtlUnwind
GetCurrentThread
SetThreadPriority
ExitThread
TerminateThread
GetCurrentProcess
GetSystemDirectoryA
SetUnhandledExceptionFilter
OpenProcess
WideCharToMultiByte
DeleteFileA
GetProcessHeap
HeapAlloc
GetSystemTimeAsFileTime
HeapFree
GetCurrentProcessId
CreateSemaphoreA
InterlockedDecrement
InterlockedIncrement
PulseEvent
CreateMutexA
ReleaseSemaphore
DeviceIoControl
GetVersionExA
GetSystemPowerStatus
CreateThread
GetModuleFileNameA
GetExitCodeProcess
TerminateProcess
GetSystemTime
CreateFileA
SetFilePointer
WriteFile
ExitProcess
OpenMutexA
ReleaseMutex
OutputDebugStringA
CallNamedPipeA
GetProcAddress
FreeLibrary
LoadLibraryA
OpenEventA
SetEvent
WaitForSingleObject
WaitForMultipleObjects
CreateEventA
ResetEvent
Sleep
GetCurrentThreadId
GetLastError
IsBadCodePtr
CloseHandle

user32

EnumDisplaySettingsA
KillTimer
UnregisterDeviceNotification
RegisterDeviceNotificationA
SetTimer
SetCursor
SendInput
EnumWindows
SendMessageA
GetPropA
RegisterWindowMessageA
RegisterHotKey
UnregisterHotKey
GetForegroundWindow
GetDesktopWindow
GetWindowThreadProcessId
BroadcastSystemMessageA
ExitWindowsEx
SystemParametersInfoA
OpenDesktopA
CloseDesktop
SendNotifyMessageA
MsgWaitForMultipleObjects
GetCursorPos
MonitorFromPoint
GetMonitorInfoA
GetMessageA
DispatchMessageA
TranslateMessage
IsWindow
DestroyWindow
DefWindowProcA
PostMessageA
FindWindowA
RegisterClassA
CreateWindowExA
ShowWindow
MessageBoxA
EnumDisplayDevicesA
ChangeDisplaySettingsExA
ChangeDisplaySettingsA
EnumDisplaySettingsExA
GetSystemMetrics
SetWindowPos
GetCursor
LoadCursorA

gdi32

DeleteDC
CreateDCA
ExtEscape

ole32

CoUninitialize
CoCreateInstance
CoInitializeEx
CoInitializeSecurity

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

userenv

LoadUserProfileA
UnloadUserProfile
GetUserProfileDirectoryW

psapi

GetModuleBaseNameA
EnumProcessModules
EnumProcesses

setupapi

SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInfoListDetailA
SetupDiGetClassDevsA
SetupDiOpenDevRegKey
SetupDiGetDeviceInstanceIdA
CM_Reenumerate_DevNode
SetupDiGetHwProfileList
CM_Get_DevNode_Registry_PropertyA
CM_Get_Device_ID_ExA
CM_Get_Parent

advapi32

OpenSCManagerA
CloseServiceHandle
ControlService
RegDeleteValueA
RegOpenCurrentUser
RegCreateKeyExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RevertToSelf
ImpersonateLoggedOnUser
QueryServiceStatus
RegSetValueExA
StartServiceA
DeregisterEventSource
ReportEventA
RegisterEventSourceA
SetServiceStatus
CreateProcessAsUserA
RegCreateKeyA
CreateServiceA
DeleteService
RegisterServiceCtrlHandlerExA
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
FreeSid
AddAccessAllowedAce
InitializeAcl
SetSecurityDescriptorOwner
AllocateAndInitializeSid
RegEnumValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
GetLengthSid
OpenProcessToken
CheckTokenMembership
AdjustTokenPrivileges
LookupPrivilegeValueA
GetUserNameA
SetThreadToken
OpenThreadToken
OpenServiceA

Sections

.text
Size: 420KB - Virtual size: 419KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�F?Ťu�
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8454a101414861b0e7669d888e0d02b8

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

userenv

psapi

setupapi

advapi32

Sections

.text Size: 420KB - Virtual size: 419KB

.rdata Size: 156KB - Virtual size: 152KB

.data Size: 8KB - Virtual size: 75KB

.rsrc Size: 4KB - Virtual size: 2KB

�F?Ťu� Size: 16KB - Virtual size: 16KB

.text
Size: 420KB - Virtual size: 419KB

.rdata
Size: 156KB - Virtual size: 152KB

.data
Size: 8KB - Virtual size: 75KB

.rsrc
Size: 4KB - Virtual size: 2KB

�F?Ťu�
Size: 16KB - Virtual size: 16KB