d0f8c2ae05b99ada4c24f07eb681281dfb49a442ef7021753b3c4da6fffd1858

Sharing

Copy URL Twitter E-mail

General

Target

d0f8c2ae05b99ada4c24f07eb681281dfb49a442ef7021753b3c4da6fffd1858
Size

281KB
MD5

a0511fba8e2b7652b1931a0fc8d15340
SHA1

1cd2c889a3c1494c205fe16e132b111744e2442d
SHA256

d0f8c2ae05b99ada4c24f07eb681281dfb49a442ef7021753b3c4da6fffd1858
SHA512

9814e6fa710dfb439f0de2af7fee67d641f6a37d7d37424868c5b2839744a04c613fe4ccb5e82180588aeefd1b504e41c02d6422bd8bdacd749e8e0c2b5655be
SSDEEP

6144:JzT2P1tOhUTJhQef7KgtIgv7Xxt1g6hJr0Bhmip:JzT2P7OhO/Qm1247h/dhJABhV

Score

N/A

Malware Config

Signatures

Files

d0f8c2ae05b99ada4c24f07eb681281dfb49a442ef7021753b3c4da6fffd1858
.exe windows x86

44ef37b48d9e3b90737a49a7bcecfd4d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetOverlappedResult
GlobalDeleteAtom
VirtualFree
ReadFile
LeaveCriticalSection
EnterCriticalSection
SetThreadExecutionState
LocalFree
GetProcAddress
CloseHandle
lstrcpyW
GetStartupInfoW
CreateMutexW
DeleteCriticalSection
HeapFree
CreateWaitableTimerW
GetCommandLineW
GetModuleHandleA
WaitForSingleObject
QueryPerformanceCounter
SetWaitableTimer
HeapAlloc
GetEnvironmentStrings
SetPriorityClass
VerifyVersionInfoW
QueueUserAPC
DuplicateHandle
GlobalAddAtomW
WaitForMultipleObjectsEx
InterlockedIncrement
SetEvent
FlushInstructionCache
GetProcessHeap
InterlockedDecrement
CreateFileMappingW
VirtualAlloc
MulDiv
GetTickCount

gdi32

DeleteDC
DeleteObject

hid

HidP_GetSpecificValueCaps
HidD_GetPreparsedData
HidD_GetHidGuid
HidD_GetProductString
HidP_MaxUsageListLength
HidP_GetUsageValue

msvcrt

wcscmp
wcscpy
wcslen
fputws
wcstol
?terminate@@YAXXZ
_c_exit
__dllonexit
??2@YAPAXI@Z
__wgetmainargs
_wcsicmp
_wcmdln
free
_CIpow
swscanf
__p__fmode
_itow
_onexit
_controlfp
_vsnwprintf

advapi32

RegOpenKeyExA
RegCreateKeyExW
RegOpenKeyW
RegDeleteKeyW
GetTokenInformation
RegSetValueW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
SetSecurityDescriptorOwner
CopySid

ole32

CoInitializeEx
CoUninitialize
CoInitializeSecurity

setupapi

SetupDiEnumDeviceInterfaces
SetupDiEnumDeviceInfo
SetupDiOpenDevRegKey

user32

SetWindowsHookExW
SendInput
UpdateLayeredWindow
DrawIconEx
GetSysColor
GetMessageW
SetThreadDesktop
GetAncestor
UnregisterDeviceNotification
FillRect
DefWindowProcW
GetClientRect
LoadStringW
OpenDesktopW
CreateWindowExW
PtInRect
EqualRect
DestroyIcon
DispatchMessageW
GetPropW
CharNextW
GetThreadDesktop
WindowFromPoint
GetMonitorInfoW
MonitorFromPoint
IntersectRect
CloseDesktop
DestroyWindow
ClientToScreen

atl

ord17
ord20
ord57
ord30
ord32
ord16
ord23
ord18
ord43

Sections

.text
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 568KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

44ef37b48d9e3b90737a49a7bcecfd4d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

hid

msvcrt

advapi32

ole32

setupapi

user32

atl

Sections

.text Size: 204KB - Virtual size: 204KB

.data Size: 42KB - Virtual size: 42KB

.rsrc Size: 33KB - Virtual size: 568KB

.text
Size: 204KB - Virtual size: 204KB

.data
Size: 42KB - Virtual size: 42KB

.rsrc
Size: 33KB - Virtual size: 568KB