0bd3f6da680d9ae599eb5c03f96535e3c740b3bb91fcecbb3ca303dda8098bb9

Sharing

Copy URL Twitter E-mail

General

Target

0bd3f6da680d9ae599eb5c03f96535e3c740b3bb91fcecbb3ca303dda8098bb9
Size

264KB
MD5

72bf18342e7b653f0bb2c371cc01cf32
SHA1

d42133f4e098c53da5556f194b58562cc3dfacd4
SHA256

0bd3f6da680d9ae599eb5c03f96535e3c740b3bb91fcecbb3ca303dda8098bb9
SHA512

cca62d1bab329c88d83e0b59646845c987b824fa531815c218acc50ec4ae5e1024ae4508bc5700b7669f86a8c6421b26040130d99994f37f55c1a417871bf064
SSDEEP

6144:KzpIT9mZ7acEGhFpwTMhxYlNqqogDkbO/SkF/a/0uFR/6q79:6wc7a4hooxDAkbOaMa/0o/z9

Score

N/A

Malware Config

Signatures

Files

0bd3f6da680d9ae599eb5c03f96535e3c740b3bb91fcecbb3ca303dda8098bb9
.exe windows x86

5493ecdcd746b846d41ba4697387c0be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsA
GetSystemDefaultLCID
GetLongPathNameW
OpenMutexA
SetComputerNameW
MoveFileA
EnumDateFormatsW
IsValidLocale
SetCurrentDirectoryW
GlobalAlloc
GetHandleInformation
CreateDirectoryW
AddAtomA
GetExitCodeThread
GetExitCodeProcess
ReadDirectoryChangesW
CreateDirectoryA
CreateMailslotW
DuplicateHandle
SetCalendarInfoW
GetWindowsDirectoryA
GetSystemDirectoryA
GetProcAddress
SearchPathA
GetSystemInfo
GetModuleHandleA
ReplaceFileA
SetErrorMode
GetModuleHandleA
FreeLibrary
ReplaceFileW
GetAtomNameW
SetLocaleInfoA
SetEvent
GetModuleFileNameW
WaitForSingleObject
lstrlenW
TlsAlloc
MoveFileW
lstrcmpiA
OpenWaitableTimerA
IsBadCodePtr
EnumCalendarInfoW
GlobalFindAtomW
GetMailslotInfo
GetVolumeInformationW
lstrcmpA
GetExpandedNameW
FindAtomW
lstrcpy
GetStartupInfoW
AddAtomW
lstrcpyW
GetEnvironmentVariableA
OpenSemaphoreW
lstrcatW
LoadResource
EnumDateFormatsA
GetLogicalDriveStringsA
CompareFileTime
FindResourceA
OpenEventW
Beep
lstrcpyn
GetVersion
GetCPInfo
GetModuleHandleW
FindResourceW
GetShortPathNameW
GetTempPathA
CreateSemaphoreW
GetLogicalDrives
GetTimeFormatA
GetCurrentThreadId

user32

MessageBoxIndirectA
LoadCursorA
OpenClipboard
RemoveMenu
MonitorFromPoint
keybd_event
GetCaretPos
CreateDialogParamA
MonitorFromWindow
GetKeyboardLayout
IsMenu
CreateDesktopW
GetMessageW
GetMenuItemInfoW
GetClassInfoA
CreateWindowExW
TrackPopupMenuEx
GetClassInfoW
DefWindowProcW
MessageBoxA
DialogBoxParamA
SetCursor
ShowCursor
GetSystemMetrics
LoadCursorW
CopyIcon
LoadImageA
GetCapture
CreateDesktopA
IsIconic
LoadMenuA
CreateDialogParamW
GetMenuItemCount
GetDlgItemInt
CreateDialogIndirectParamA
CharPrevA
SetWindowTextW
AdjustWindowRect
SendMessageW
mouse_event
GetActiveWindow
ShowWindow
GetSysColor
GetScrollPos
GetForegroundWindow
GetKeyboardType
InsertMenuItemW
RegisterWindowMessageA
LoadBitmapA
PostQuitMessage
DialogBoxParamW
GetDlgItemTextA
SetWindowPos
SetWindowTextA
wsprintfA
DialogBoxIndirectParamW
CharNextW
WaitMessage
CreatePopupMenu
MonitorFromRect
AppendMenuW
wvsprintfW
CharPrevW
SetTimer
DestroyIcon
RegisterWindowMessageW
SetFocus
SetActiveWindow
GetCursorPos
CheckMenuItem
GetFocus
ShowCaret
EndMenu
InvalidateRect
SendDlgItemMessageW
CreateAcceleratorTableA
SetWindowLongW
UnregisterClassA
GetSubMenu
EmptyClipboard

gdi32

GetRasterizerCaps
GetStockObject
UpdateICMRegKeyW
SetMetaFileBitsEx
RemoveFontResourceW
CreateDIBPatternBrushPt
CreateScalableFontResourceW
GetTextExtentPointW
CreateColorSpaceA
CreateFontIndirectW
CreateFontW
CreatePatternBrush
CreatePolygonRgn
CreateFontIndirectA
GetTextExtentPointA
GetMetaFileW
SelectBrushLocal
CreateBitmap
CreateDIBSection
UpdateICMRegKeyA
CreateCompatibleDC
GdiGetBatchLimit
CreateEllipticRgn
ExtCreateRegion
TranslateCharsetInfo
CreateICW
AddFontResourceA
CreateBitmapIndirect
CreateRoundRectRgn
CreateScalableFontResourceA
RemoveFontResourceExW
DeleteObject
CreateMetaFileA
CreateColorSpaceW
GetMetaFileA
CreateFontA
CreateICA

advapi32

OpenEventLogA
IdentifyCodeAuthzLevelW
SetSecurityDescriptorDacl
LsaICLookupSids

version

VerFindFileW
VerInstallFileW
VerInstallFileA
VerLanguageNameW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerFindFileA
VerQueryValueA

mprapi

MprAdminMIBEntryCreate
MprAdminInterfaceTransportAdd
MprAdminTransportGetInfo
MprInfoDuplicate
MprDomainQueryRasServer
MprConfigServerConnect
MprInfoBlockAdd
MprConfigBufferFree
MprAdminConnectionClearStats
MprAdminTransportSetInfo
MprDomainRegisterRasServer
MprAdminGetErrorString
MprConfigTransportEnum
MprAdminRegisterConnectionNotification
RasPrivilegeAndCallBackNumber
MprConfigInterfaceTransportEnum
MprAdminInterfaceGetHandle
MprConfigTransportGetHandle
MprAdminInterfaceGetCredentialsEx
MprConfigInterfaceTransportAdd
MprAdminMIBServerConnect
MprConfigServerInstall
MprInfoBlockAdd

crypt32

CryptGetDefaultOIDDllList
I_CertUpdateStore
I_CryptFindLruEntry
CertSerializeCRLStoreElement
CryptMsgCountersign
CertVerifyCertificateChainPolicy

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.C
Size: 111KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 5KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.srgyuO
Size: 112KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5493ecdcd746b846d41ba4697387c0be

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

version

mprapi

crypt32

Sections

.text Size: 12KB - Virtual size: 12KB

.C Size: 111KB - Virtual size: 164KB

.edata Size: 5KB - Virtual size: 276KB

.rdata Size: 6KB - Virtual size: 22KB

.data Size: 5KB - Virtual size: 93KB

.srgyuO Size: 112KB - Virtual size: 189KB

.edata Size: 4KB - Virtual size: 120KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 1KB - Virtual size: 4KB

.text
Size: 12KB - Virtual size: 12KB

.C
Size: 111KB - Virtual size: 164KB

.edata
Size: 5KB - Virtual size: 276KB

.rdata
Size: 6KB - Virtual size: 22KB

.data
Size: 5KB - Virtual size: 93KB

.srgyuO
Size: 112KB - Virtual size: 189KB

.edata
Size: 4KB - Virtual size: 120KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 1KB - Virtual size: 4KB