3d8901f50a79b0f0e3f30a2f7970a00c77850e70912fbaf94fd3d45a35c308e0

Sharing

Copy URL Twitter E-mail

General

Target

3d8901f50a79b0f0e3f30a2f7970a00c77850e70912fbaf94fd3d45a35c308e0
Size

103KB
MD5

a0bb99d3d181ab2bb56d49da5e4c3128
SHA1

19c703c62bfeb1bd2291ce91051d93d9fb2c7b44
SHA256

3d8901f50a79b0f0e3f30a2f7970a00c77850e70912fbaf94fd3d45a35c308e0
SHA512

1c810e477fa93a7276450fbba62a7681743fcf34db54f0a014ae04bbe73dfd59ae07562063b28069d3c96feecf0293762591f4c626efb820699b8d3d5ceef03f
SSDEEP

1536:0eaYapLYRJrJhDmn/haLnsdX6wUN29iEX9OBKinLKhj8io/DXW+5kdWaqhQj:0e82thDm/ILneirBKRF8hXW+5kdWaqhM

Score

N/A

Malware Config

Signatures

Files

3d8901f50a79b0f0e3f30a2f7970a00c77850e70912fbaf94fd3d45a35c308e0
.exe windows x86

258eee38728e532a714dd619a97aa6a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WTSGetActiveConsoleSessionId
SetEvent
WaitForMultipleObjects
RaiseException
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
GetModuleFileNameW
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
LoadLibraryA
RtlUnwind
LocalFree
GetVersionExW
CreateEventW
LocalAlloc
GetModuleHandleW
GetTickCount
OpenMutexW
GetLongPathNameW
OpenProcess
Sleep
CreateWaitableTimerW
CreateMutexW
GetCurrentProcessId
ProcessIdToSessionId
SetWaitableTimer
CreateProcessW
CloseHandle
OpenEventW
GetLocalTime
FileTimeToSystemTime
CompareFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLastError
WriteConsoleA
InitializeCriticalSection
HeapReAlloc
VirtualAlloc
HeapAlloc
GetModuleHandleA
GetLocaleInfoA
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapFree
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection

user32

IsDialogMessageW
PeekMessageW
SetTimer
MessageBoxA
CreateWindowExW
RegisterClassExW
LoadIconW
DefWindowProcW
PostQuitMessage
GetWindowThreadProcessId
GetWindowLongW
GetSystemMetrics
GetWindowRect
GetWindowTextA
GetDesktopWindow
GetTopWindow
GetForegroundWindow
MsgWaitForMultipleObjectsEx
DispatchMessageW
TranslateMessage

gdi32

GetStockObject

advapi32

DeleteService
ControlService
OpenServiceW
CloseServiceHandle
ChangeServiceConfig2W
CreateServiceW
OpenSCManagerW
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExW
SetServiceStatus
GetTokenInformation
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
RegOpenKeyW
CreateProcessAsUserW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
StartServiceW

shell32

CommandLineToArgvW

wtsapi32

WTSQueryUserToken

psapi

GetModuleFileNameExW

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

258eee38728e532a714dd619a97aa6a1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

wtsapi32

psapi

userenv

Sections

.text Size: 67KB - Virtual size: 67KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 5KB - Virtual size: 13KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 67KB - Virtual size: 67KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 5KB - Virtual size: 13KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 8KB