66d1279ad9c9a735adf61c248111a538b62a872a3174fcc31afd1cf54267b772

Sharing

Copy URL Twitter E-mail

General

Target

66d1279ad9c9a735adf61c248111a538b62a872a3174fcc31afd1cf54267b772
Size

879KB
MD5

797f89511942ce2b966971ff4bc34610
SHA1

378d27d694bf663936d9ab975afedf8304c1a0f5
SHA256

66d1279ad9c9a735adf61c248111a538b62a872a3174fcc31afd1cf54267b772
SHA512

2f220421124e7af60c19a023ae82a2546920edd12e1d6f24ee5f8ce52b920bc803acf8a1ca25f834baa27a4430b063478d83bc868752bb5d42a5767506fd3aa8
SSDEEP

24576:KP5iTwGmeTpUCYBBBpGJnSazoY//s7lHUF:KP5iTwGmeTHqpwSa8k/s7

Score

N/A

Malware Config

Signatures

Files

66d1279ad9c9a735adf61c248111a538b62a872a3174fcc31afd1cf54267b772
.exe windows x86

be5dd05f82dc3c0a41108b57ddc78943

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

ReportEventW
BuildTrusteeWithObjectsAndSidW
RegSetValueExW
FreeSid
AddAccessDeniedAce
LookupAccountSidW
DeregisterEventSource
CryptAcquireContextW
CreateProcessAsUserW
RegDisablePredefinedCache
QueryServiceConfigW
LsaQuerySecret
GetServiceDisplayNameA
RegDeleteKeyA
SetTokenInformation
CryptSetProvParam
RegisterServiceCtrlHandlerA
CryptContextAddRef
RegQueryMultipleValuesA

ole32

CreateClassMoniker
CoSuspendClassObjects
CoTaskMemRealloc
OleDuplicateData
HGLOBAL_UserSize
GetHGlobalFromStream
FreePropVariantArray
CoGetInterfaceAndReleaseStream
CLIPFORMAT_UserMarshal
MonikerCommonPrefixWith
CoGetObjectContext
CreateGenericComposite
CoGetMarshalSizeMax
CLSIDFromString
CoRegisterClassObject
OleFlushClipboard
HICON_UserUnmarshal
OleSaveToStream
CoTreatAsClass
HBITMAP_UserUnmarshal
OleSetMenuDescriptor
CLIPFORMAT_UserSize
CoEnableCallCancellation
OleCreate
CreateStreamOnHGlobal
StgConvertPropertyToVariant
CoRevokeClassObject
HBITMAP_UserSize
HWND_UserMarshal
CoCancelCall
UpdateDCOMSettings
HWND_UserFree

odbc32

CursorLibLockDbc
CursorLibTransact
ValidateErrorQueue
SearchStatusCode
PostODBCError
CursorLibLockStmt
VRetrieveDriverErrorsRowCol
SQLTablePrivilegesA
LockHandle
PostODBCComponentError
VFreeErrors
CursorLibLockDesc

kernel32

GetVolumePathNameW
lstrcpyW
VirtualAlloc
SetEvent
DuplicateHandle
SetFileTime
GetUserDefaultLCID
SetHandleCount
GetConsoleWindow
CloseHandle
HeapFree
SetThreadExecutionState
SetCommTimeouts
GetVolumeNameForVolumeMountPointA
InterlockedExchangeAdd
DeleteTimerQueueTimer
FindNextChangeNotification
lstrcpynW
GetPrivateProfileStringW
PostQueuedCompletionStatus
GetSystemDefaultLangID
LoadLibraryW

shlwapi

PathUndecorateW
PathIsNetworkPathW
SHRegGetUSValueW
AssocIsDangerous
UrlIsW
StrRetToBufW
PathCompactPathA
PathRenameExtensionW
StrCSpnW
UrlCombineA
StrRChrIA
StrCmpLogicalW
PathCombineA
PathRemoveBackslashW
StrSpnW
StrCmpW
StrFormatByteSizeW
wvnsprintfA
SHCreateStreamOnFileEx
SHCreateStreamOnFileW
PathGetArgsA
PathRemoveBlanksW
PathAddExtensionW
StrCmpIW
ColorHLSToRGB

setupapi

SetupDiCreateDeviceInterfaceRegKeyW
SetupDiDestroyDriverInfoList
SetupDiGetClassDevsExW
SetupOpenLog
SetupCommitFileQueueW
SetupGetSourceFileLocationW
CM_Get_Child
SetupDiEnumDriverInfoA
SetupDiInstallDevice
CM_Setup_DevNode
pSetupStringFromGuid
SetupDiGetSelectedDriverA
SetupDiGetDeviceInstanceIdA
SetupGetLineTextA
SetupDiSetSelectedDriverW
SetupDiEnumDriverInfoW
SetupInstallFromInfSectionW
SetupCloseLog
SetupDiGetINFClassW
SetupQueueCopyIndirectW
SetupQueryInfVersionInformationW
CM_Get_Device_ID_Size
SetupOpenInfFileW
SetupPromptReboot
SetupDiGetDeviceInterfaceDetailW
SetupCloseInfFile
SetupDiOpenClassRegKeyExW
SetupSetDirectoryIdExW

netapi32

NetUserGetInfo
NetWkstaUserGetInfo
NetGroupGetUsers
NetUnregisterDomainNameChangeNotification
NetRemoteTOD
NetGroupGetInfo
NetpwNameValidate
NetUserChangePassword
NetGroupDelUser
NetGroupEnum
NetLocalGroupSetInfo
NetLocalGroupDelMembers
NetAlertRaiseEx
NetUseDel
NetGetJoinInformation
NetServerGetInfo
NetApiBufferFree
NetLocalGroupGetMembers
NetMessageBufferSend
NetValidateName
NetLocalGroupAdd
NetGetDCName
NetLocalGroupEnum
NetQueryDisplayInformation
NetServiceInstall
NetServiceEnum

Sections

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 233B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 262B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 25KB - Virtual size: 343KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CRT
Size: 182KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 50KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 160KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 110KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 216KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be5dd05f82dc3c0a41108b57ddc78943

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

ole32

odbc32

kernel32

shlwapi

setupapi

netapi32

Sections

.data Size: 10KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 233B

.data Size: 2KB - Virtual size: 1KB

.data Size: 10KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 262B

.text Size: 25KB - Virtual size: 343KB

CRT Size: 182KB - Virtual size: 227KB

.idata Size: 50KB - Virtual size: 79KB

.bss Size: 160KB - Virtual size: 205KB

.edata Size: 110KB - Virtual size: 277KB

DATA Size: 216KB - Virtual size: 244KB

.rsrc Size: 110KB - Virtual size: 109KB

.reloc Size: 1024B - Virtual size: 578B

.data
Size: 10KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 233B

.data
Size: 2KB - Virtual size: 1KB

.data
Size: 10KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 262B

.text
Size: 25KB - Virtual size: 343KB

CRT
Size: 182KB - Virtual size: 227KB

.idata
Size: 50KB - Virtual size: 79KB

.bss
Size: 160KB - Virtual size: 205KB

.edata
Size: 110KB - Virtual size: 277KB

DATA
Size: 216KB - Virtual size: 244KB

.rsrc
Size: 110KB - Virtual size: 109KB

.reloc
Size: 1024B - Virtual size: 578B