68f4546e4ecd56714ec2a68114e06faa912e2dfb95b3d53c5205f15d857fe0e2

Sharing

Copy URL Twitter E-mail

General

Target

68f4546e4ecd56714ec2a68114e06faa912e2dfb95b3d53c5205f15d857fe0e2
Size

179KB
MD5

80b62aa50e675e1caee27545639e46a0
SHA1

e1b914fa587fa52f6ea22018ac774fc17268ba8e
SHA256

68f4546e4ecd56714ec2a68114e06faa912e2dfb95b3d53c5205f15d857fe0e2
SHA512

61463361b1136a0796da1fe6f8b0c60ac73f1dd823297e73c20291ced45fa466d19e8db0c15d35e645bf4b813d23a40084c6f6a0668950cdbf672716cf1ccdb5
SSDEEP

3072:xEjf5gbCmAVO/wMS0qUx1OZSN64scRkpdeQrP3dxoZERhkvUWbBu+iGCXQOEOw8E:xETMCmAIn7Lj64scuDbTDoZEDWbw+iDO

Score

N/A

Malware Config

Signatures

Files

68f4546e4ecd56714ec2a68114e06faa912e2dfb95b3d53c5205f15d857fe0e2
.exe windows x86

67b52652514f1907c58f4be7017de2a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFolderPathW
DragAcceptFiles

advapi32

GetUserNameW
SetSecurityDescriptorDacl
RegSetValueExW
AddAccessAllowedAce
AddAccessDeniedAce
AdjustTokenPrivileges
AllocateAndInitializeSid
AreAnyAccessesGranted
CheckTokenMembership
CryptSetProvParam
FreeSid
GetLengthSid
InitializeAcl
InitializeSecurityDescriptor
LsaRetrievePrivateData
OpenProcessToken
OpenThreadToken
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExA
RegQueryValueExA

msvcrt

wctomb
wcsrchr
wcsncpy
wcsncmp
towupper
towlower
swscanf
strtoul
strstr
strncmp
strncat
strcspn
strchr
sscanf
realloc
qsort
printf
memmove
memcpy
malloc
ldexp
iswupper
iswspace
iswprint
iswdigit
iswalpha
iswalnum
isspace
isprint
isleadbyte
ftell
fseek
fprintf
fgets
feof
ceil
atol
atoi
_wtol
_wstrtime
_wsetlocale
_write
_wrename
_wgetenv
_wctime
_wcsupr
_wcsnicmp
_wcslwr
_vsnwprintf
_strnicmp
_stricmp
_spawnlp
_spawnl
_snwprintf
_snprintf
_setsystime
_purecall
_popen
_onexit
_memicmp
_lseeki64
_lrotl
_itow
_ismbcsymbol
_ismbcspace
_isatty
_iob
_initterm
_heapused
_getche
_fileno
_execl
_errno
_atoi64
_amsg_exit
__pioinfo
__doserrno
__dllonexit
__badioinfo
__CxxFrameHandler
_XcptFilter
_wtmpnam

version

VerFindFileA
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueA

kernel32

ExitProcess
EnterCriticalSection
WriteProcessMemory
WriteFile
WaitNamedPipeW
WaitForSingleObjectEx
WaitForMultipleObjects
WaitCommEvent
VirtualQueryEx
VirtualProtectEx
VirtualProtect
VirtualFree
VirtualAllocEx
VirtualAlloc
UnmapViewOfFile
UnhandledExceptionFilter
TerminateThread
SwitchToFiber
SuspendThread
SleepEx
SizeofResource
SetUnhandledExceptionFilter
SetThreadContext
SetFilePointer
SetEvent
SetErrorMode
SetEnvironmentVariableA
SetCommTimeouts
SetCommState
SetCommMask
RtlUnwind
ResetEvent
ReleaseSemaphore
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
PeekNamedPipe
OutputDebugStringA
OpenProcess
OpenFileMappingW
OpenEventW
MapViewOfFile
LockResource
LocalFree
LoadResource
LoadLibraryA
LeaveCriticalSection
IsBadWritePtr
IsBadCodePtr
InterlockedIncrement
InterlockedExchangeAdd
InterlockedDecrement
InterlockedCompareExchange
HeapFree
HeapDestroy
HeapAlloc
GetThreadTimes
GetThreadSelectorEntry
GetThreadPriority
GetThreadContext
GetTempPathA
GetTempFileNameW
GetTempFileNameA
GetSystemTimeAsFileTime
GetSystemInfo
GetSystemDirectoryA
GetProcessTimes
GetProcAddress
GetOverlappedResult
GetModuleHandleA
GetModuleFileNameA
GetLocalTime
GetLastError
GetFileSizeEx
GetExitCodeProcess
GetEnvironmentVariableA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCommandLineW
GetCommTimeouts
GetCommState
GetCommModemStatus
FreeLibrary
FindFirstFileA
FileTimeToSystemTime
DuplicateHandle
FileTimeToLocalFileTime
CancelIo
ClearCommError
ConnectNamedPipe
ContinueDebugEvent
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileMappingA
CreateNamedPipeW
CreateRemoteThread
CreateSemaphoreA
CreateThread
DebugActiveProcess
DebugBreak
DeleteFiber
DeleteFileA
DeviceIoControl
DisableThreadLibraryCalls
FileTimeToDosDateTime

Exports

Exports

AHeartbeat
CryptFreeFunc
DrawPixels
FIsHTMLFile
OpenTempTable2

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

67b52652514f1907c58f4be7017de2a3

Headers

DLL Characteristics

File Characteristics

Imports

shell32

advapi32

msvcrt

version

kernel32

Exports

Exports

Sections

.text Size: 54KB - Virtual size: 53KB

.rdata Size: 97KB - Virtual size: 96KB

.data Size: 15KB - Virtual size: 15KB

.rsrc Size: 12KB - Virtual size: 11KB

.text
Size: 54KB - Virtual size: 53KB

.rdata
Size: 97KB - Virtual size: 96KB

.data
Size: 15KB - Virtual size: 15KB

.rsrc
Size: 12KB - Virtual size: 11KB