3d399db4217f79e58e3634877a65f0e59dc90ecca273ee8d725c3c8d38e37722

Sharing

Copy URL

Twitter E-mail

General

Target

3d399db4217f79e58e3634877a65f0e59dc90ecca273ee8d725c3c8d38e37722
Size

257KB
MD5

9048aed4b9fdec720ef890d80bbde8f8
SHA1

bc596721914713bccef580fb3b547837c634bacb
SHA256

3d399db4217f79e58e3634877a65f0e59dc90ecca273ee8d725c3c8d38e37722
SHA512

a2c494d0658134491b23e4abe3fc45ac2e8623bb17e98ba9bf44fe64811ff9c18732a6ae753d20e44203aca54291ffaeed77f245bed78df385f4f5ada9b3cd00
SSDEEP

6144:pPDl2d2dBDkS9EOMs+DSHCp6/9Hf8731zBrd4SH2DGaDgnElThLVo11ifqb+6:tDIYpkXLsGSHCs/9HfkhNVWDGaDg0lVM

Score

N/A

Malware Config

Signatures

Files

3d399db4217f79e58e3634877a65f0e59dc90ecca273ee8d725c3c8d38e37722
.exe windows x86

784ca92f2d88d08479a37e32521a8be6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

atl

ord16
ord20
ord32
ord57
ord23
ord58
ord17
ord43

setupapi

SetupDiGetClassDevsExW
SetupDiDestroyDeviceInfoList
SetupDiOpenDevRegKey
SetupDiGetDeviceInterfaceDetailW

advapi32

RegSetValueW
RegDeleteKeyW
RegSetValueExW
OpenThreadToken
SetSecurityDescriptorDacl
RegOpenKeyExA
RegOpenKeyExW
RegEnumKeyW
RegOpenKeyW
CopySid

msvcrt

_onexit
free
_except_handler3
?terminate@@YAXXZ
wcslen
__wgetmainargs
_wfopen
__p__fmode
fclose
_purecall
exit
_ftol
wcscpy
_adjust_fdiv
_cexit

user32

DestroyIcon
GetClientRect
GetSysColorBrush
GetPropW
EnumDisplaySettingsW
SendInput
PostThreadMessageW
ReleaseDC
IsWindow
UpdateLayeredWindow
ShowWindow
EnumDisplayMonitors
RegisterWindowMessageW
GetThreadDesktop
IntersectRect
GetSystemMetrics
GetDoubleClickTime
CallWindowProcW
GetDC
EqualRect
GetWindowLongW
GetMonitorInfoW
MonitorFromWindow
ClientToScreen

kernel32

UnmapViewOfFile
DeleteCriticalSection
WaitForMultipleObjects
QueueUserAPC
SetThreadExecutionState
CreateFileMappingW
SetEvent
GetLastError
SetPriorityClass
SetThreadPriority
HeapAlloc
GlobalDeleteAtom
GetTickCount
CreateMutexW
InitializeCriticalSectionAndSpinCount
SetProcessShutdownParameters
lstrcpyW
EnterCriticalSection
SetWaitableTimer
VerifyVersionInfoW
GetSystemDirectoryW
OpenEventW
MapViewOfFile
SetPriorityClass
GetModuleHandleA
QueryPerformanceCounter
FlushInstructionCache
VirtualFree
CloseHandle
GetProcessShutdownParameters
InterlockedIncrement
VirtualAllocEx
MulDiv

gdi32

SelectObject
DeleteDC
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC

ole32

CoInitializeSecurity
CoTaskMemFree
CoTaskMemAlloc

hid

HidP_MaxUsageListLength
HidD_GetPreparsedData
HidD_FreePreparsedData
HidP_GetCaps
HidD_GetProductString
HidD_GetHidGuid

Sections

.text
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

784ca92f2d88d08479a37e32521a8be6

Headers

DLL Characteristics

File Characteristics

Imports

atl

setupapi

advapi32

msvcrt

user32

kernel32

gdi32

ole32

hid

Sections

.text Size: 174KB - Virtual size: 174KB

.data Size: 71KB - Virtual size: 70KB

.rsrc Size: 10KB - Virtual size: 556KB

.text
Size: 174KB - Virtual size: 174KB

.data
Size: 71KB - Virtual size: 70KB

.rsrc
Size: 10KB - Virtual size: 556KB