b96728931c137e185d4b8d732e921bc5c97a1450ad57e0daae3de946c0f03f99

Sharing

Copy URL Twitter E-mail

General

Target

b96728931c137e185d4b8d732e921bc5c97a1450ad57e0daae3de946c0f03f99
Size

895KB
MD5

503c1c8d26c32588071e63f1e75846a0
SHA1

a7b53437ee415c6dab391949224e96f02fd99607
SHA256

b96728931c137e185d4b8d732e921bc5c97a1450ad57e0daae3de946c0f03f99
SHA512

762cd8f203bc39a1c076713621eee17db7d99bc4f37245683bc3bed5ddf74148d6d78ddab4d528088bad3a4d7143a8b8c7e6700e3e8dc616f3c9608e9fb1c1a5
SSDEEP

6144:8AtdIaN0N/TJdqISDdB8pskrIN+oHJagy/yB32TjogWV1:8AEai/TJwISkQXHJd332fM1

Score

N/A

Malware Config

Signatures

Files

b96728931c137e185d4b8d732e921bc5c97a1450ad57e0daae3de946c0f03f99
.exe windows x86

cc228d3863526c491edefdbf2410e307

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetExplicitEntriesFromAclW
LsaEnumerateAccountRights
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExW
RemoveTraceCallback
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
SystemFunction027

kernel32

GetComputerNameExA
GetCurrentProcess
GetTickCount
InterlockedCompareExchange
InterlockedExchange
QueueUserWorkItem
ResetWriteWatch
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
CloseHandle
CreateFileW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTempPathW
LocalAlloc
QueryPerformanceCounter
ReadFile
SetErrorMode
WriteFile
lstrcmpW
VirtualAlloc
CreateEventW
CreateJobObjectA
InterlockedIncrement
lstrlenW
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetLastError
HeapFree
GetProcAddress
GetModuleHandleA
ExitProcess
GetTimeFormatA
GetDateFormatA
RemoveDirectoryW
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
IsDebuggerPresent
RtlUnwind
CompareStringA
CompareStringW
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
RaiseException
GetStdHandle
GetModuleFileNameA
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryA
InitializeCriticalSection
GetTimeZoneInformation
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapSize
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
SetStdHandle
CreateFileA
SetEnvironmentVariableA

rpcrt4

NdrConformantStringMemorySize
NdrConvert
MesIncrementalHandleReset

user32

ChangeDisplaySettingsA
CreateIconFromResourceEx
GetForegroundWindow
GetMenuItemInfoA
MoveWindow
GetMessageW
wsprintfW

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 676KB - Virtual size: 685KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cc228d3863526c491edefdbf2410e307

Headers

File Characteristics

Imports

advapi32

kernel32

rpcrt4

user32

Sections

.text Size: 188KB - Virtual size: 187KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 676KB - Virtual size: 685KB

.text
Size: 188KB - Virtual size: 187KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 676KB - Virtual size: 685KB