4144eaed19e091d049d7ec0b9bc3696a1d2166f6e1ac3dcd4afd3333fbcdd96c

Sharing

Copy URL Twitter E-mail

General

Target

4144eaed19e091d049d7ec0b9bc3696a1d2166f6e1ac3dcd4afd3333fbcdd96c
Size

289KB
MD5

91d7ca9f4753ed888768b932327f5c00
SHA1

5b1c514570d04cd4f78f1e1dff2cfb8fbca2f218
SHA256

4144eaed19e091d049d7ec0b9bc3696a1d2166f6e1ac3dcd4afd3333fbcdd96c
SHA512

07fd3c24643cf2fe2632233c737764e8ae57eaafd2fdf9b9be366b6df3b8d8be07fdd9698e3eae0d0cc7dbcd0bcf2fc7d4182d047f726086d83c8945b56385a4
SSDEEP

6144:hjf9q9bq5NdTiwx1/aAnMcmZheH6USn+FQEXNokVkQLBH0uSD82:hjf935fTiw7JmveH6USn+FQEXlVkGHH

Score

N/A

Malware Config

Signatures

Files

4144eaed19e091d049d7ec0b9bc3696a1d2166f6e1ac3dcd4afd3333fbcdd96c
.exe windows x86

467c225b99b5477ab02268089de02699

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32NextW
CreateToolhelp32Snapshot
GetCurrentProcessId
SetStdHandle
Module32FirstW
GetStringTypeW
HeapReAlloc
GetConsoleCP
SetFilePointer
RtlUnwind
Process32FirstW
CreateProcessW
SetCurrentDirectoryW
FindClose
lstrlenW
OpenProcess
WaitForSingleObject
FindFirstFileW
LockResource
GetVersionExW
SizeofResource
LoadResource
FindResourceW
MultiByteToWideChar
WriteFile
DeleteFileW
CloseHandle
DeviceIoControl
GetProcAddress
GetCurrentDirectoryW
GetLastError
CreateFileW
CopyFileW
LoadLibraryW
GetSystemDirectoryW
GetModuleHandleW
FreeLibrary
GetCurrentProcess
LocalFree
ReadConsoleInputW
SetConsoleMode
GetConsoleMode
GetSystemTimeAsFileTime
GetCommandLineW
HeapSetInformation
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteConsoleW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
HeapSize
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WideCharToMultiByte
LCMapStringW
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoW
HeapCreate
QueryPerformanceCounter
GetTickCount
FlushFileBuffers

shlwapi

SHGetValueW
PathFileExistsW

wininet

InternetOpenW
InternetReadFile
InternetCloseHandle
InternetOpenUrlW
InternetQueryDataAvailable

user32

GetSystemMetrics
CharUpperW
CharLowerW

advapi32

GetTokenInformation
ConvertSidToStringSidW
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
SetNamedSecurityInfoW
RegEnumKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownW
RegEnumKeyExW
OpenProcessToken
RegSetValueExW
RegCloseKey
ControlService
RegOpenKeyExW
ChangeServiceConfigW
RegDeleteValueW
StartServiceW
RegDeleteKeyW
RegQueryValueExW
RegSetValueW
RegCreateKeyExW
OpenServiceW
OpenSCManagerW
DeleteService
CloseServiceHandle
CreateServiceW

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.2rdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

467c225b99b5477ab02268089de02699

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shlwapi

wininet

user32

advapi32

Sections

.text Size: 68KB - Virtual size: 67KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 102KB - Virtual size: 102KB

.reloc Size: 7KB - Virtual size: 7KB

.2rdata Size: 76KB - Virtual size: 76KB

.text
Size: 68KB - Virtual size: 67KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 102KB - Virtual size: 102KB

.reloc
Size: 7KB - Virtual size: 7KB

.2rdata
Size: 76KB - Virtual size: 76KB