0a0605c9229ffe3712e84cdd2ef522aa0a8fd0897675a062935b0b7dec4f9c64

Sharing

Copy URL

Twitter E-mail

General

Target

0a0605c9229ffe3712e84cdd2ef522aa0a8fd0897675a062935b0b7dec4f9c64
Size

578KB
MD5

2110e0f4e6d080c29599e695a3f42b77
SHA1

df75ecdd097dade32e53ee67d2781c2008298b8e
SHA256

0a0605c9229ffe3712e84cdd2ef522aa0a8fd0897675a062935b0b7dec4f9c64
SHA512

f0c5f5052948b79fc69a5652deaad235f29fa040c498b342c7eefe8c04936734b7f3c8b7e582a514e4b0eb19b0534af3db0655b0662e536602ea43ef8608688b
SSDEEP

12288:NGvH5urtG4PbSkrVXcDbeejlzUo/0EH1:NGP4PukrVMfeeyocEH

Score

N/A

Malware Config

Signatures

Files

0a0605c9229ffe3712e84cdd2ef522aa0a8fd0897675a062935b0b7dec4f9c64
.exe windows x64

79848de6d0fed35f4d7b38f89b47727d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

TraceMessage
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
UnregisterTraceGuids
RegGetValueW
RegCloseKey
RegQueryInfoKeyW
RegOpenKeyExW
RegGetValueA
RegOpenKeyW
RegQueryValueExW
CloseTrace
ProcessTrace
OpenTraceW

kernel32

GetProcAddress
LoadLibraryExW
GetSystemTime
SystemTimeToTzSpecificLocalTime
CopyFileW
WideCharToMultiByte
HeapAlloc
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
SetLastError
FlushInstructionCache
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
lstrcmpW
GetSystemTimeAsFileTime
FormatMessageW
Sleep
MultiByteToWideChar
LockResource
LoadResource
FindResourceW
GetModuleFileNameW
InitializeCriticalSection
RaiseException
DeleteCriticalSection
GetCurrentThreadId
UnregisterWait
GetCurrentProcess
IsWow64Process
HeapSetInformation
GetModuleHandleW
RegisterWaitForSingleObject
LoadLibraryExA
LocalAlloc
FindNextFileA
FindFirstFileA
GetDriveTypeA
GetFileAttributesExW
SetFileAttributesW
GetFileInformationByHandle
SetFilePointer
ReplaceFileW
GetFileAttributesExA
lstrcmpA
SetEvent
FileTimeToDosDateTime
IsDBCSLeadByte
CreateFileA
lstrlenA
TlsGetValue
TlsFree
GlobalFree
GlobalHandle
TlsSetValue
TlsAlloc
OpenEventW
GlobalReAlloc
GetFullPathNameW
CreateMutexW
GetSystemDirectoryW
GetCommandLineW
Wow64DisableWow64FsRedirection
CloseHandle
CreateFileMappingW
ReadFile
SizeofResource
WriteFile
UnmapViewOfFile
MapViewOfFile
GetFileSize
GetDateFormatW
DeleteFileA
SetCurrentDirectoryW
GetCurrentDirectoryW
FileTimeToLocalFileTime
OpenProcess
CreateFileW
GetTimeFormatW
FileTimeToSystemTime
GetProductInfo
GetVersionExW
FindClose
FindFirstFileW
FreeLibrary
OutputDebugStringA
GetTickCount
QueryPerformanceCounter
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
InterlockedPushEntrySList
VirtualAlloc
InterlockedPopEntrySList
VirtualFree
HeapFree
lstrcmpiW
lstrcmpiA
MoveFileExW
DeleteFileW
WaitForSingleObject
CreateEventW
GetCurrentProcessId
LocalFree
ExpandEnvironmentStringsW
GetFileAttributesW
CreateDirectoryW
GetLastError

gdi32

BitBlt
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
DeleteDC
GetStockObject
GetObjectW
GetDeviceCaps

user32

DestroyWindow
CreateAcceleratorTableW
ClientToScreen
GetParent
ScreenToClient
MoveWindow
CreateWindowExW
GetClassInfoExW
RegisterClassExW
CharUpperW
SetCapture
CharUpperBuffA
CharPrevA
CharToOemBuffA
OemToCharBuffA
CharNextA
DispatchMessageA
ReleaseCapture
FillRect
GetClientRect
InvalidateRgn
CallWindowProcW
InvalidateRect
GetDC
ReleaseDC
GetDesktopWindow
DestroyAcceleratorTable
SetWindowLongPtrW
GetWindowLongPtrW
GetWindowLongW
SetWindowLongW
DefWindowProcW
GetWindowTextW
PeekMessageA
PostQuitMessage
LoadAcceleratorsW
GetMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageW
CharNextW
MapDialogRect
SetWindowContextHelpId
TranslateAcceleratorW
PostMessageW
TrackPopupMenu
EnableMenuItem
DestroyMenu
GetSubMenu
LoadMenuW
MapWindowPoints
DestroyIcon
GetDlgItemTextW
GetDlgItemInt
EndDialog
SetDlgItemTextW
EnableWindow
SetDlgItemInt
SendDlgItemMessageW
DialogBoxParamW
LoadIconW
SetForegroundWindow
UnregisterHotKey
GetKeyState
UnregisterClassW
KillTimer
SetTimer
IsWindowVisible
GetWindowRect
AdjustWindowRect
GetProcessDefaultLayout
RegisterHotKey
UpdateWindow
ShowWindow
SystemParametersInfoW
GetSysColorBrush
GetSystemMetrics
LoadStringW
RegisterWindowMessageW
GetWindowTextLengthW
SetWindowTextW
BeginPaint
EndPaint
IsChild
GetFocus
SetFocus
GetWindow
GetDlgItem
SendMessageW
IsWindow
GetClassNameW
GetSysColor
SetWindowPos
RedrawWindow
UnregisterClassA
CharLowerA
MessageBoxW
LoadCursorW

msvcrt

qsort
memmove
time
gmtime
localtime
strncmp
_getdrive
wcscat_s
mbstowcs_s
memcpy_s
_wcsupr
wcsstr
wcstoul
_wcstoui64
wcstol
wcsrchr
_itow_s
free
strstr
_mktemp
_vscwprintf
_snwscanf_s
wcschr
swprintf_s
malloc
calloc
_callnewh
memset
__C_specific_handler
_XcptFilter
memcpy
wcscpy_s
wcsncpy_s
_vsnwprintf
_wtoi
_wcsicmp
_vsnprintf
_CxxThrowException
__CxxFrameHandler3
memcmp
_amsg_exit
__wgetmainargs
__set_app_type
exit
_exit
_cexit
__setusermatherr
realloc
_errno
??1type_info@@UEAA@XZ
_onexit
__dllonexit
_unlock
_lock
?terminate@@YAXXZ
_commode
_fmode
_wcmdln
_initterm
wcscmp

comctl32

ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Destroy
InitCommonControlsEx
ImageList_Create
ord381

ntdll

EtwEventWriteNoRegistration
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

oleaut32

VarBstrCmp
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
OleCreateFontIndirect
SysFreeString
SysStringByteLen
VariantClear
VariantInit
SysAllocStringLen
RegisterTypeLi
LoadRegTypeLi

ole32

OleUninitialize
CoCreateGuid
StringFromGUID2
CoTaskMemFree
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoInitializeEx
CreateStreamOnHGlobal
OleLockRunning
CoTaskMemAlloc
CoGetClassObject
CoCreateInstance
CoInitialize
CoUninitialize

shell32

CommandLineToArgvW
SHFileOperationW
ShellExecuteExW
ord171
ShellAboutW
SHCreateItemInKnownFolder

shlwapi

PathFindExtensionW
PathAppendW
PathGetArgsW
PathRemoveExtensionW
PathFindFileNameW
PathCombineW
PathRemoveFileSpecW
PathFileExistsW
SHAutoComplete
PathRemoveBlanksW
SHCreateStreamOnFileEx
PathFindExtensionA
PathMatchSpecExA
PathIsSameRootW
ord218
ord216

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Sections

.text
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 366KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79848de6d0fed35f4d7b38f89b47727d

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

comctl32

ntdll

oleaut32

ole32

shell32

shlwapi

version

Sections

.text Size: 187KB - Virtual size: 186KB

.data Size: 3KB - Virtual size: 27KB

.pdata Size: 5KB - Virtual size: 5KB

.idata Size: 12KB - Virtual size: 12KB

.rsrc Size: 366KB - Virtual size: 368KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 187KB - Virtual size: 186KB

.data
Size: 3KB - Virtual size: 27KB

.pdata
Size: 5KB - Virtual size: 5KB

.idata
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 366KB - Virtual size: 368KB

.reloc
Size: 2KB - Virtual size: 2KB