970839e71d46f85d7dbab1ce6b3aabc36cb5dfba5af0e9b1d71e9078dcafcfa2

Sharing

Copy URL Twitter E-mail

General

Target

970839e71d46f85d7dbab1ce6b3aabc36cb5dfba5af0e9b1d71e9078dcafcfa2
Size

173KB
MD5

4326c9e6b65ef997ac191cce981454c3
SHA1

968c2096e3aac7eb895e95a828b9e0248c4ff1db
SHA256

970839e71d46f85d7dbab1ce6b3aabc36cb5dfba5af0e9b1d71e9078dcafcfa2
SHA512

2d2bb4fe149431c75af236929221319fd2a6eabde3fdfb41a44e5c2fd307064f8abbae1221c37bf69ba72af18e197757fc30d8f37b9de4cec99b93236864693b
SSDEEP

3072:Kr5lho8vFE+7JrIObrOLAyhhBKios+07CYSKokunUCpsuIPwdFpfx+uZlyjdzBFC:w5VE+7JrFOHBRoT0hSHnUCJdFFhZ4hB9

Score

N/A

Malware Config

Signatures

Files

970839e71d46f85d7dbab1ce6b3aabc36cb5dfba5af0e9b1d71e9078dcafcfa2
.exe windows x86

68869e2a15844b3b38b456dff36b0750

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFolderPathW

shlwapi

PathIsUNCServerShareW
PathAppendW

crypt32

CertEnumCertificatesInStore
CertSaveStore
CertFreeCertificateContext
CertAddCertificateContextToStore
CertDuplicateCertificateContext
CertGetNameStringW
CertOpenStore
CertEnumSystemStore
CryptQueryObject
CertGetCertificateContextProperty
CertGetEnhancedKeyUsage
CertDeleteCertificateFromStore
CryptDecodeObject
CertCloseStore
CertFindCertificateInStore
CertControlStore
CertDuplicateStore
CryptFindOIDInfo

dnsapi

DnsNameCompareEx_W

kernel32

GetLastError
VirtualAlloc

ntdll

RtlIdentifierAuthoritySid
NtQuerySystemTime
RtlSubAuthorityCountSid
RtlSubAuthoritySid
RtlInitUnicodeString
RtlNtStatusToDosError

gdi32

SetBkColor
SetTextColor
DeleteObject
CreateBitmap
CreatePatternBrush
GetTextExtentPoint32W
GetDeviceCaps
CreateFontIndirectW

ole32

CoGetApartmentID
StringFromIID
CoCreateInstance
CoTaskMemAlloc
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
StringFromCLSID
CoTaskMemFree

user32

SetWindowLongW
MessageBoxA
DestroyIcon
LoadIconW
SystemParametersInfoW
CheckRadioButton
ShowWindow
MessageBeep
EndPaint
GetDesktopWindow
ReleaseDC
WinHelpW
LoadStringW
GetSystemMetrics
MessageBoxW
DestroyWindow
GetDlgItem
DrawFocusRect
OffsetRect
MapDialogRect
EnableWindow
SetScrollPos
SendMessageW
wsprintfW
GetScrollInfo
PostMessageW
RegisterClassW
IsWindow
SetWindowTextW
RegisterWindowMessageW
GetSysColor
FindWindowExW
GetParent
SetDlgItemTextW
UpdateWindow
SetScrollInfo
LoadBitmapW
IsWindowEnabled
SetCursor
GetWindowThreadProcessId
GetClientRect
GetWindowTextW
MoveWindow
GetWindowTextLengthW
SetScrollRange
CheckDlgButton
SetFocus
SendDlgItemMessageW
GetSysColorBrush
GetWindowRect
SetWindowPos
InflateRect
ScreenToClient
SetWindowContextHelpId
GetWindow
GetDC
GetDlgItemTextW
GetDlgCtrlID
LoadCursorW
DialogBoxParamW
CallWindowProcW
RegisterClipboardFormatW
CreateWindowExW
EndDialog
GetWindowLongW
SetForegroundWindow
IsDlgButtonChecked
DrawIcon
MapWindowPoints
DefWindowProcW
FrameRect
ScrollWindow
BeginPaint

version

GetFileVersionInfoW

ntdsapi

DsCrackSpn3W
DsCrackNamesW
DsBindW
DsIsMangledDnW
DsUnBindW
DsFreeNameResultW

dsprop

ADsPropSendErrorMessage
ADsPropShowErrorDialog
ADsPropCreateNotifyObj
ADsPropGetInitInfo
ADsPropSetHwnd
ADsPropSetHwndWithTitle
FindSheet

apphelp

SetPermLayers

cryptui

CryptUIDlgSelectCertificateW
CryptUIDlgViewCertificateW

credui

CredUIInitControls
CredUIParseUserNameW

advapi32

RevertToSelf
LsaQueryInformationPolicy
LsaQueryTrustedDomainInfo
LsaDelete
RegOpenKeyExW
GetExplicitEntriesFromAclW
GetLengthSid
LsaSetForestTrustInformation
CryptAcquireContextW
LsaCreateTrustedDomainEx
BuildTrusteeWithObjectsAndSidW
GetSidSubAuthorityCount
RegQueryValueExW
LsaLookupSids
LsaFreeMemory
GetSidSubAuthority
FreeSid
SetNamedSecurityInfoW
InitializeAcl
ImpersonateAnonymousToken
RegDeleteKeyW
IsValidSid
MakeSelfRelativeSD
GetSecurityDescriptorLength
EqualPrefixSid
InitializeSecurityDescriptor
CryptReleaseContext
ImpersonateLoggedOnUser
GetSidLengthRequired
EqualSid
LsaSetTrustedDomainInfoByName
AllocateAndInitializeSid
SetEntriesInAclW
OpenSCManagerW
SystemFunction040
OpenServiceW
LogonUserW
QueryServiceStatus
LsaClose
GetNamedSecurityInfoW
RegSetValueExW
GetSecurityDescriptorDacl
GetSidIdentifierAuthority
LsaOpenPolicy
LsaOpenTrustedDomain
GetSecurityDescriptorControl
BuildTrusteeWithSidW
LsaQueryTrustedDomainInfoByName
LsaRetrievePrivateData
LsaOpenTrustedDomainByName
LsaQueryForestTrustInformation
RegCreateKeyExW
SystemFunction041
CryptGenRandom
LsaNtStatusToWinError
RegCloseKey
CloseServiceHandle

Sections

.text
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 848KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

68869e2a15844b3b38b456dff36b0750

Headers

DLL Characteristics

File Characteristics

Imports

shell32

shlwapi

crypt32

dnsapi

kernel32

ntdll

gdi32

ole32

user32

version

ntdsapi

dsprop

apphelp

cryptui

credui

advapi32

Sections

.text Size: 512B - Virtual size: 404B

.rsrc Size: 78KB - Virtual size: 77KB

.idata Size: 6KB - Virtual size: 5KB

.rdata Size: 12KB - Virtual size: 11KB

.reloc Size: 512B - Virtual size: 28B

.data Size: 75KB - Virtual size: 848KB

.text
Size: 512B - Virtual size: 404B

.rsrc
Size: 78KB - Virtual size: 77KB

.idata
Size: 6KB - Virtual size: 5KB

.rdata
Size: 12KB - Virtual size: 11KB

.reloc
Size: 512B - Virtual size: 28B

.data
Size: 75KB - Virtual size: 848KB