0d99cbc4f03020e669bb660aa270dc3cca12fe7fdbe56524ec7592e319dbefa6

Sharing

Copy URL

Twitter E-mail

General

Target

0d99cbc4f03020e669bb660aa270dc3cca12fe7fdbe56524ec7592e319dbefa6
Size

312KB
MD5

8322b345657447700573127f24c61fd0
SHA1

18ad1942eaa79bc9df96634af097b5fbd1708332
SHA256

0d99cbc4f03020e669bb660aa270dc3cca12fe7fdbe56524ec7592e319dbefa6
SHA512

b68694394176c1640dbee55f34030c1b5e91e004593f8ddf81fecfb0643d47216f4f1eceffc67736e293fdb68fa331863da6256341283e3081a93b1a69ec09dc
SSDEEP

6144:1zbKDIE3jh+KIUUVJsgW60Xg4MqDRTnFjO1hGmY9iyakZ:1zbQFZrSJjjQDFZQyaA

Score

N/A

Malware Config

Signatures

Files

0d99cbc4f03020e669bb660aa270dc3cca12fe7fdbe56524ec7592e319dbefa6
.exe windows x86

de49ddcbaf5f118b9e0e8b58991e109a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetQueuedCompletionStatus
ReadProcessMemory
FindFirstFileA
GlobalFindAtomW
OpenFileMappingA
CreateWaitableTimerA
UpdateResourceA
GetNumberFormatA
SetFileApisToOEM
GetStartupInfoA
CancelWaitableTimer
LockFile
_lcreat
_llseek
GlobalAddAtomA
LockFileEx
GetConsoleOutputCP
SetConsoleScreenBufferSize
GetStringTypeW
IsProcessorFeaturePresent
lstrlenW
ClearCommBreak
HeapReAlloc
FlushConsoleInputBuffer
OpenSemaphoreA
IsBadReadPtr
AddAtomA
WriteTapemark
PeekConsoleInputW
lstrcmpiW
FillConsoleOutputCharacterA
CreateConsoleScreenBuffer
GetDriveTypeW
VirtualProtect
lstrcatA
GetStringTypeExW
GetConsoleMode
AllocConsole
GetDiskFreeSpaceExA
GetPriorityClass
SetThreadPriority
WaitForSingleObjectEx
IsDebuggerPresent
WriteConsoleInputA
Beep
WinExec
FindResourceExA
GetModuleHandleA
GetPrivateProfileStringW
GetLargestConsoleWindowSize
GetDiskFreeSpaceA
GlobalUnlock
SetEnvironmentVariableW
GetProcessVersion
FindFirstChangeNotificationW
SetSystemTime
SetErrorMode
SystemTimeToFileTime
GetFileAttributesW
GetWindowsDirectoryW
InterlockedIncrement
SetLocalTime
ReadConsoleInputW
AreFileApisANSI
GetPrivateProfileStructA
UnlockFileEx
FoldStringW
EnumTimeFormatsW
FindAtomA
TryEnterCriticalSection
IsBadWritePtr
EraseTape
SetConsoleTitleA
GetProcAddress
GetTimeFormatA
DisconnectNamedPipe
FreeResource
GetCompressedFileSizeW
GetTapePosition
GetCurrentThreadId
GetStringTypeA
MapViewOfFile
GetVersionExA

user32

CharUpperBuffW
GetMenuItemInfoA

gdi32

GetBitmapBits
PathToRegion
Polygon
GetPolyFillMode
GetTextExtentPointW
PatBlt

comdlg32

GetSaveFileNameW
FindTextW
FindTextA

advapi32

DeleteAce
RegSetKeySecurity
RegEnumValueA
EnumServicesStatusA
LookupAccountSidW
CryptHashData
IsTextUnicode
CryptDestroyHash
GetSidSubAuthority
SetFileSecurityA
CryptGetKeyParam
CreatePrivateObjectSecurity
CloseEventLog
CryptGenKey
InitializeSid
SetSecurityDescriptorSacl
RegUnLoadKeyW
NotifyBootConfigStatus
RegCloseKey
CryptVerifySignatureW
RegQueryValueW
CryptDecrypt
StartServiceA
ControlService
SetSecurityDescriptorOwner
CryptDestroyKey
CryptImportKey
StartServiceW
StartServiceCtrlDispatcherW
SetKernelObjectSecurity
GetSidIdentifierAuthority
CreateServiceW
LookupAccountNameW
CryptReleaseContext
CryptCreateHash
GetAclInformation

shell32

SHBrowseForFolderA
SHAddToRecentDocs
SHFileOperationA
ShellAboutA
SHGetFileInfoW

ole32

CreateGenericComposite
StringFromIID
CoCreateFreeThreadedMarshaler
MkParseDisplayName
CoInitialize
CoGetClassObject

oleaut32

SafeArrayGetUBound
RegisterTypeLi
VariantClear
LoadTypeLi
SafeArrayPutElement

comctl32

ImageList_BeginDrag
ImageList_DragLeave
ImageList_SetBkColor

shlwapi

SHDeleteValueW
SHRegCloseUSKey
StrFormatByteSize64A
PathRelativePathToW
PathIsDirectoryEmptyW
StrCpyNW
PathGetArgsW
PathSkipRootW
StrStrA
SHRegGetBoolUSValueA
StrRStrIW
UrlCreateFromPathW

setupapi

SetupDiSetDeviceRegistryPropertyA
SetupDiClassNameFromGuidW
SetupGetLineCountA
SetupScanFileQueueW
SetupGetInfFileListA
SetupOpenInfFileW

msvcrt

__p__commode
_adjust_fdiv
_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_controlfp
_except_handler3
__set_app_type
__p__fmode
_XcptFilter

Sections

.text
Size: 260KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

de49ddcbaf5f118b9e0e8b58991e109a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

setupapi

msvcrt

Sections

.text Size: 260KB - Virtual size: 258KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 40KB - Virtual size: 39KB

.text
Size: 260KB - Virtual size: 258KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 40KB - Virtual size: 39KB