dafbbbc06d8693b07ecf44c1cf1ad551d920a92f92ee71bc8bd3bc20f27c8481

Sharing

Copy URL Twitter E-mail

General

Target

dafbbbc06d8693b07ecf44c1cf1ad551d920a92f92ee71bc8bd3bc20f27c8481
Size

174KB
MD5

a0b78ce4e63a515be44f490a9559b9c4
SHA1

ab973a78fb1b296d20984da2beb38b7728fc4599
SHA256

dafbbbc06d8693b07ecf44c1cf1ad551d920a92f92ee71bc8bd3bc20f27c8481
SHA512

df32e21badb9b99f5df3481024ab5af42e55200fda800c057cb42a0da38804ef40469b70e029b602efed764b54905d197b2da84200fc8bf2467b629c8640d759
SSDEEP

3072:+GLz6KZ2wsVo4R819Cy9+UfEjsy2SDI0fHqIjgI0qgyDAhMLPTMOVzsFLqrw:tz6KEVKT9rfEjP2KfHqIt0qgq2wbMOVV

Score

N/A

Malware Config

Signatures

Files

dafbbbc06d8693b07ecf44c1cf1ad551d920a92f92ee71bc8bd3bc20f27c8481
.exe windows x86

76f72279526842a2cc493edf7ad9ddd8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imagehlp

GetImageConfigInformation

version

GetFileVersionInfoW

ole32

StringFromCLSID
CoCreateInstance
CoTaskMemFree
ReleaseStgMedium
CoTaskMemAlloc
StringFromIID
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream

cryptui

CryptUIDlgViewCertificateW
CryptUIDlgSelectCertificateW

dnsapi

DnsNameCompareEx_W

shlwapi

PathIsUNCServerShareW
PathAppendW

ntdll

RtlNtStatusToDosError
RtlIdentifierAuthoritySid
RtlInitUnicodeString
RtlSubAuthoritySid
RtlSubAuthorityCountSid
NtQuerySystemTime

advapi32

InitializeAcl
LsaSetTrustedDomainInfoByName
FreeSid
OpenServiceW
SystemFunction040
CloseServiceHandle
GetSidSubAuthority
ImpersonateLoggedOnUser
LsaCreateTrustedDomainEx
MakeSelfRelativeSD
LsaClose
IsValidSid
RegSetValueExW
LsaQueryForestTrustInformation
CryptGenRandom
SetEntriesInAclW
LsaFreeMemory
LsaOpenPolicy
GetSidLengthRequired
LsaQueryTrustedDomainInfoByName
LsaNtStatusToWinError
RegCreateKeyExW
ImpersonateAnonymousToken
AllocateAndInitializeSid
SetNamedSecurityInfoW
EqualPrefixSid
RegDeleteKeyW
CryptAcquireContextW
RegOpenKeyExW
GetNamedSecurityInfoW
GetSidSubAuthorityCount
LsaOpenTrustedDomainByName
LogonUserW
RegCloseKey
LsaSetForestTrustInformation
LsaLookupSids
BuildTrusteeWithObjectsAndSidW
LsaOpenTrustedDomain
RevertToSelf
LsaQueryInformationPolicy
GetSidIdentifierAuthority
OpenSCManagerW
GetExplicitEntriesFromAclW
RegQueryValueExW
LsaQueryTrustedDomainInfo
GetSecurityDescriptorDacl
LsaRetrievePrivateData
SystemFunction041
GetSecurityDescriptorControl
LsaDelete
QueryServiceStatus
InitializeSecurityDescriptor
BuildTrusteeWithSidW
GetLengthSid
GetSecurityDescriptorLength
EqualSid
CryptReleaseContext

crypt32

CertOpenStore
CertEnumCertificatesInStore
CertDuplicateCertificateContext
CertFindCertificateInStore
CertCloseStore
CertFreeCertificateContext
CertDeleteCertificateFromStore
CertDuplicateStore
CertSaveStore
CertControlStore
CryptQueryObject
CertGetCertificateContextProperty
CryptFindOIDInfo
CertGetEnhancedKeyUsage
CertEnumSystemStore
CertGetNameStringW
CertAddCertificateContextToStore
CryptDecodeObject

gdi32

SetBkColor
CreateFontIndirectW
GetTextExtentPoint32W
SetTextColor
CreatePatternBrush
CreateBitmap
DeleteObject
GetDeviceCaps

credui

CredUIParseUserNameW
CredUIInitControls

dsprop

ADsPropSetHwnd
ADsPropShowErrorDialog
ADsPropGetInitInfo
ADsPropCreateNotifyObj
ADsPropSetHwndWithTitle
FindSheet
ADsPropSendErrorMessage

kernel32

VirtualAlloc
GetLastError

shell32

SHGetFolderPathW

apphelp

GetPermLayers

ntdsapi

DsUnBindW
DsCrackSpn3W
DsCrackNamesW
DsIsMangledDnW
DsFreeNameResultW
DsBindW

user32

SetFocus
SetForegroundWindow
GetDesktopWindow
FrameRect
SendDlgItemMessageW
GetParent
ScrollWindow
SetCursor
LoadCursorW
RegisterClassW
IsDlgButtonChecked
wsprintfW
DrawFocusRect
GetWindowTextW
ShowWindow
SetWindowContextHelpId
MessageBoxA
GetScrollInfo
CheckRadioButton
IsWindow
GetWindowThreadProcessId
GetWindowRect
SetScrollPos
SystemParametersInfoW
ReleaseDC
GetSysColor
SendMessageW
MessageBeep
EnableWindow
ScreenToClient
RegisterWindowMessageW
DialogBoxParamW
GetSysColorBrush
GetDlgItemTextW
WinHelpW
MapDialogRect
UpdateWindow
SetWindowPos
GetSystemMetrics
DestroyIcon
CallWindowProcW
SetWindowTextW
DrawIcon
SetScrollRange
PostMessageW
GetWindowTextLengthW
RegisterClipboardFormatW
SetScrollInfo
GetWindowLongW
DestroyWindow
GetDlgCtrlID
MessageBoxW
EndPaint
OffsetRect
LoadBitmapW
IsWindowEnabled
GetClientRect
InflateRect
FindWindowExW
DefWindowProcW
MoveWindow
CreateWindowExW
GetWindow
MapWindowPoints
LoadIconW
SetDlgItemTextW
LoadStringW
GetDC
CheckDlgButton
EndDialog
BeginPaint
GetDlgItem
SetWindowLongW

Sections

.text
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 848KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

76f72279526842a2cc493edf7ad9ddd8

Headers

DLL Characteristics

File Characteristics

Imports

imagehlp

version

ole32

cryptui

dnsapi

shlwapi

ntdll

advapi32

crypt32

gdi32

credui

dsprop

kernel32

shell32

apphelp

ntdsapi

user32

Sections

.text Size: 512B - Virtual size: 412B

.idata Size: 6KB - Virtual size: 6KB

.rdata Size: 85KB - Virtual size: 85KB

.data Size: 24KB - Virtual size: 848KB

.rsrc Size: 56KB - Virtual size: 55KB

.reloc Size: 512B - Virtual size: 32B

.text
Size: 512B - Virtual size: 412B

.idata
Size: 6KB - Virtual size: 6KB

.rdata
Size: 85KB - Virtual size: 85KB

.data
Size: 24KB - Virtual size: 848KB

.rsrc
Size: 56KB - Virtual size: 55KB

.reloc
Size: 512B - Virtual size: 32B